How many CVEs does LogicalDOC have?

LogicalDOC has 25 published CVE records since 2017, including 13 in the last two years.

How many LogicalDOC CVEs are in CISA KEV?

None of LogicalDOC's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which LogicalDOC products have the most CVEs?

The LogicalDOC products with the most published CVEs are logicaldoc, LogicalDOC Enterprise, LogicalDOC Community, LogicalDOC Community Edition, Community Edition.

What are the most common weakness types in LogicalDOC CVEs?

LogicalDOC's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-23 (Relative Path Traversal).

Are there public exploits for LogicalDOC vulnerabilities?

Yes — 9 of LogicalDOC's CVEs have a known public exploit.

How many critical LogicalDOC vulnerabilities are there?

LogicalDOC has 1 critical and 14 high-severity CVEs.

What is the average severity of LogicalDOC CVEs?

The average CVSS base score across LogicalDOC's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

25 CVEs

LogicalDOC Vulnerabilities

Name: LogicalDOC vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for LogicalDOC.

25

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

9

Public exploits

PoC or exploit code

7.1

Avg CVSS

2017–2025

Overview

LogicalDOC has 25 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting LogicalDOC products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on LogicalDOC's vulnerability posture, as a share of its 25 published CVEs.

Average CVSS: 7.1
Critical / high: 60%
Actively exploited (KEV): 0%
Public exploit available: 36%
Patch available: 52%

Severity and exploitation

How the CVSS severity of LogicalDOC's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High14

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of LogicalDOC's CVEs are currently listed in CISA's KEV catalog.

Public exploits

9

9 of LogicalDOC's CVEs have a known public exploit available.

Most affected products

The LogicalDOC products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in LogicalDOC CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish LogicalDOC CVE records.

Disclosure activity by year

How many LogicalDOC CVEs were published each year.

2017

3

2019

1

2020

4

2023

4

2025

13

Latest LogicalDOC CVEs

The most recently disclosed vulnerabilities affecting LogicalDOC.

LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
CWE-22
High · CVSS 7.1
EPSS 1.1%2025-12-24
LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
CWE-426
High · CVSS 8.7
EPSS 0.4%2025-12-24
LogicalDOC Community Edition Admin Login login.jsp excessive authentication
CWE-307
Medium · CVSS 6.3
EPSS 0.8%2025-10-31
LogicalDOC Community Edition API Key creation UI cross site scripting
CWE-94
Medium · CVSS 5.1
EPSS 0.3%2025-10-31
LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
CWE-94
Medium · CVSS 5.1
EPSS 0.3%2025-10-19
Blind SQL Injection in Logout
CWE-89
High · CVSS 8.7
EPSS 0.4%2025-03-14
Reflected Cross-Site Scripting (XSS)
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2025-03-14
High vulnerability · 2025-03-14
CWE-23
High · CVSS 7.1
EPSS 0.4%2025-03-14
High vulnerability · 2025-03-14
CWE-23
High · CVSS 8.7
EPSS 0.6%2025-03-14
Remote Code Execution (RCE) via Automation Scripting
CWE-94
High · CVSS 8.6
EPSS 0.5%2025-03-14
High vulnerability · 2025-03-14
CWE-89
High · CVSS 7.1
EPSS 0.3%2025-03-14
High vulnerability · 2025-03-14
CWE-89
High · CVSS 7.1
EPSS 0.3%2025-03-14

Track new LogicalDOC CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor LogicalDOC CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,677 CVEs linux22,794 CVEs Google16,507 CVEs Apple15,096 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,120 CVEs

Browse all vendors

Frequently asked questions

Common questions about LogicalDOC vulnerabilities.

How many CVEs does LogicalDOC have?: LogicalDOC has 25 published CVE records since 2017, including 13 in the last two years.
How many LogicalDOC CVEs are in CISA KEV?: None of LogicalDOC's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which LogicalDOC products have the most CVEs?: The LogicalDOC products with the most published CVEs are logicaldoc, LogicalDOC Enterprise, LogicalDOC Community, LogicalDOC Community Edition, Community Edition.
What are the most common weakness types in LogicalDOC CVEs?: LogicalDOC's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-23 (Relative Path Traversal).
Are there public exploits for LogicalDOC vulnerabilities?: Yes — 9 of LogicalDOC's CVEs have a known public exploit.
How many critical LogicalDOC vulnerabilities are there?: LogicalDOC has 1 critical and 14 high-severity CVEs.
What is the average severity of LogicalDOC CVEs?: The average CVSS base score across LogicalDOC's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track LogicalDOC vulnerabilities

Monitor new LogicalDOC vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing