L
Vendor security profile
LogicalDOC
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit3
Patch rate%57
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
10
CVE KEV
CVE severity distribution
14toplam CVE
High9 (64%)
Medium5 (36%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%21
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
6.9
CVE-2026-109206
LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
L
Patch verified
8.7
CVE-2026-109205
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
L
Patch verified
5.3
CVE-2026-109204
LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
L
Patch verified
7.1
CVE-2026-109203
LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
L
Patch status unknown
7.1
CVE-2026-109202
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
L
Patch verified
8.7
CVE-2026-109201
LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
L
Patch verified
5.3
CVE-2026-109200
LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
L
Patch status unknown
8.7
CVE-2026-109199
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
L
Patch verified
7.1
CVE-2026-109170
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
L
Patch verified
7.1
CVE-2026-109169
LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
L
Patch verified