Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Logicaldoc
Logicaldoc Community Edition

LogicalDOC Community Edition Vulnerabilities: CVEs, CISA KEV & Security Advisories

14 CVEs

LD

LogicalDOC Community Edition Vulnerabilities

CVE security advisories and vulnerability history for LogicalDOC Community Edition by logicaldoc.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

6.7

Avg CVSS

2023–2026

Last updated October 12, 2026

Overview

LogicalDOC Community Edition has 14 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of LogicalDOC Community Edition's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High7

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of LogicalDOC Community Edition's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of LogicalDOC Community Edition's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every LogicalDOC Community Edition version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 9.310 CVEs
<= 8.7.33 CVEs

Find a version

14 CVEs

Sort

LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
CVE-2026-109206
Patch
CWE-204
Medium · CVSS 6.9
EPSS 0.2% (15th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
CVE-2026-109205
Patch
CWE-770
High · CVSS 8.7
EPSS 0.4% (35th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
CVE-2026-109204
Patch
CWE-640
Medium · CVSS 5.3
EPSS 0.2% (9th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
CVE-2026-109203
Patch
CWE-862
High · CVSS 7.1
EPSS 0.2% (14th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
CVE-2026-109202
Patch
CWE-862
High · CVSS 7.1
EPSS 0.3% (16th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
CVE-2026-109201
Patch
CWE-862
High · CVSS 8.7
EPSS 0.3% (16th pct)2026-10-12
LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
CVE-2026-109200
Patch
CWE-918
Medium · CVSS 5.3
EPSS 0.2% (7th pct)2026-10-12
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
CVE-2026-109199
Patch
CWE-94
High · CVSS 8.7
EPSS 0.4% (32th pct)2026-10-12
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
CVE-2026-109170
Patch
CWE-89
High · CVSS 7.1
EPSS 0.3% (18th pct)2026-10-12
LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
CVE-2026-109169
Patch
CWE-89
High · CVSS 7.1
EPSS 0.3% (18th pct)2026-10-12
LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
CVE-2025-11946
Public exploit
CWE-94
Medium · CVSS 5.1
EPSS 0.4% (29th pct)2025-10-19
LogicalDOC Document Version Comment Stored XSS
CVE-2022-47418
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (41th pct)2023-02-07
LogicalDOC Document File Name Stored XSS
CVE-2022-47417
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (41th pct)2023-02-07
Medium vulnerability · 2023-02-07
CVE-2022-47415
Public exploit
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (40th pct)2023-02-07

Common weakness types

The CWE weakness categories most often found in LogicalDOC Community Edition CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-862Missing Authorization3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-640Weak Password Recovery Mechanism for Forgotten Password1 CVE
CWE-204Observable Response Discrepancy1 CVE
CWE-918Server-Side Request Forgery (SSRF)1 CVE
CWE-770Allocation of Resources Without Limits or Throttling1 CVE

Disclosure activity by year

How many LogicalDOC Community Edition CVEs were published each year.

2023

3

2025

1

2026

10

Other logicaldoc products

Browse vulnerabilities for other products by logicaldoc.

logicaldoc30 CVEs LogicalDOC Enterprise14 CVEs community10 CVEs LogicalDOC Community7 CVEs Community Edition3 CVEs

All logicaldoc vulnerabilities

Frequently asked questions

Common questions about LogicalDOC Community Edition vulnerabilities.

How many CVEs does logicaldoc LogicalDOC Community Edition have?: logicaldoc LogicalDOC Community Edition has 14 published CVE records since 2023.
How many logicaldoc LogicalDOC Community Edition CVEs are in CISA KEV?: None of logicaldoc LogicalDOC Community Edition's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for logicaldoc LogicalDOC Community Edition vulnerabilities?: Yes — 4 of logicaldoc LogicalDOC Community Edition's CVEs have a known public exploit.
Which versions of logicaldoc LogicalDOC Community Edition are affected?: 2 distinct logicaldoc LogicalDOC Community Edition versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in logicaldoc LogicalDOC Community Edition CVEs?: logicaldoc LogicalDOC Community Edition's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
What is the average severity of logicaldoc LogicalDOC Community Edition CVEs?: The average CVSS base score across logicaldoc LogicalDOC Community Edition's scored CVEs is 6.7.

References

All logicaldoc vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track LogicalDOC Community Edition vulnerabilities

Get an alert for each new LogicalDOC Community Edition CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References