{"items":[{"id":"CVE-2026-109206","published":"2026-10-12T13:39:47.896Z","updated":"2026-10-13T15:18:15.204Z","title":"LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet","severity":"MEDIUM","score":6.9,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00248,"kevAdded":null},{"id":"CVE-2026-109205","published":"2026-10-12T13:39:47.270Z","updated":"2026-10-14T17:49:18.923Z","title":"LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2026-109204","published":"2026-10-12T13:39:45.921Z","updated":"2026-10-18T12:03:15.988Z","title":"LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket","severity":"MEDIUM","score":5.3,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2026-109203","published":"2026-10-12T13:39:45.258Z","updated":"2026-10-13T18:21:28.374Z","title":"LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-109202","published":"2026-10-12T13:39:44.572Z","updated":"2026-10-13T16:57:39.696Z","title":"LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-109201","published":"2026-10-12T13:39:43.919Z","updated":"2026-10-13T15:16:41.434Z","title":"LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-109200","published":"2026-10-12T13:39:43.259Z","updated":"2026-10-15T03:01:32.251Z","title":"LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href","severity":"MEDIUM","score":5.3,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2026-109199","published":"2026-10-12T13:39:42.546Z","updated":"2026-10-18T12:03:16.134Z","title":"LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2026-109170","published":"2026-10-12T13:39:41.904Z","updated":"2026-10-13T18:39:39.092Z","title":"LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00273,"kevAdded":null},{"id":"CVE-2026-109169","published":"2026-10-12T13:39:41.214Z","updated":"2026-10-13T16:57:49.699Z","title":"LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community Edition","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-12547","published":"2025-10-31T18:32:08.209Z","updated":"2025-10-31T18:55:56.744Z","title":"LogicalDOC Community Edition Admin Login login.jsp excessive authentication","severity":"MEDIUM","score":6.3,"vendor":"LogicalDOC","product":"Community Edition","kev":false,"epss":0.00791,"kevAdded":null},{"id":"CVE-2025-12546","published":"2025-10-31T18:32:05.885Z","updated":"2025-10-31T18:59:31.730Z","title":"LogicalDOC Community Edition API Key creation UI cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"LogicalDOC","product":"Community Edition","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2025-11946","published":"2025-10-19T21:32:06.214Z","updated":"2025-10-20T18:03:53.761Z","title":"LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting","severity":"MEDIUM","score":5.1,"vendor":"LogicalDOC","product":"Community Edition","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2024-12245","published":"2025-03-14T18:11:14.218Z","updated":"2025-03-18T17:05:58.045Z","title":"Blind SQL Injection in Logout","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2024-12020","published":"2025-03-14T18:09:24.810Z","updated":"2025-03-18T14:09:12.073Z","title":"Reflected Cross-Site Scripting (XSS)","severity":"MEDIUM","score":6.4,"vendor":"LogicalDOC","product":"LogicalDOC Enterprise","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2024-12019","published":"2025-03-14T18:07:01.253Z","updated":"2025-03-18T16:26:57.725Z","title":"Arbitrary File Read via Document API","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2024-54449","published":"2025-03-14T18:04:20.149Z","updated":"2025-03-18T16:27:46.227Z","title":"Remote Code Execution (RCE) via Arbitrary File Write In Document API","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00612,"kevAdded":null},{"id":"CVE-2024-54448","published":"2025-03-14T18:01:25.311Z","updated":"2026-08-26T17:55:52.628Z","title":"Remote Code Execution (RCE) via Automation Scripting","severity":"HIGH","score":8.6,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2024-54447","published":"2025-03-14T17:57:26.356Z","updated":"2025-03-18T16:37:33.586Z","title":"Blind SQLi in Saved Search","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2024-54446","published":"2025-03-14T17:53:01.300Z","updated":"2025-03-14T18:13:21.649Z","title":"Blind SQLi in Document History","severity":"HIGH","score":7.1,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2024-54445","published":"2025-03-14T17:49:44.090Z","updated":"2025-03-14T18:15:11.612Z","title":"Blind SQLi in Login","severity":"HIGH","score":8.7,"vendor":"LogicalDOC","product":"LogicalDOC Community","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2022-47418","published":"2023-02-07T22:04:06.882Z","updated":"2025-03-25T14:33:59.819Z","title":"LogicalDOC Document Version Comment Stored XSS","severity":"MEDIUM","score":5.4,"vendor":"LogicalDOC","product":"LogicalDOC Enterprise","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-47417","published":"2023-02-07T21:59:24.965Z","updated":"2025-03-25T14:35:37.236Z","title":"LogicalDOC Document File Name Stored XSS","severity":"MEDIUM","score":5.4,"vendor":"LogicalDOC","product":"LogicalDOC Enterprise","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-47416","published":"2023-02-07T21:46:38.739Z","updated":"2025-03-25T14:04:23.568Z","title":"LogicalDOC Chat Stored XSS","severity":"MEDIUM","score":5.4,"vendor":"LogicalDOC","product":"LogicalDOC Enterprise","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2022-47415","published":"2023-02-07T21:33:56.745Z","updated":"2025-03-25T14:09:43.739Z","title":"LogicalDOC Messaging Stored XSS","severity":"MEDIUM","score":5.4,"vendor":"LogicalDOC","product":"LogicalDOC Enterprise","kev":false,"epss":0.00477,"kevAdded":null}]}