In LogicalDOC Community Edition up to version 9.3, a user who is signed in can craft a special email template that causes the server to execute operating‑system…
Too many irrelevant or confusing CVEs? Use stackflag.com
#logicaldoc #CVE #infosec
In LogicalDOC Community Edition up to version 9.3, a user who is signed in can craft a special email template that causes the server to execute operating‑system…
Too many irrelevant or confusing CVEs? Use stackflag.com
#logicaldoc #CVE #infosec
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to wri...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97440
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to wri...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97440
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recove...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97441
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recove...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97441
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated use...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97444
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated use...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97444
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLet...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97448
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLet...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97448
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to ex...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97443
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to ex...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97443
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97447
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97447
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97439
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97439
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting V...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97446
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting V...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97446
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to do...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97442
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to do...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97442
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-styl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97445
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 LogicalDOC
📝 LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-styl...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97445
#cybersecurity #infosec #cve #euvd
📊 n/a
📝 LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL q...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211038
#cybersecurity #infosec #cve #euvd
📊 n/a
📝 LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL q...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211038
#cybersecurity #infosec #cve #euvd
See what's new in 9.3 👉
www.logicaldoc.com/news/664-log...
#AI #DocumentManagement #DMS #Productivity
See what's new in 9.3 👉
www.logicaldoc.com/news/664-log...
#AI #DocumentManagement #DMS #Productivity
www.logicaldoc.com/news/664-log...
www.logicaldoc.com/news/664-log...
https://vulnerability.circl.lu/vuln/CVE-2019-25258
LogicalDOC Srl - LogicalDOC Enterprise
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2019-25258
LogicalDOC Srl - LogicalDOC Enterprise
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2019-25257
LogicalDOC Srl - LogicalDOC Enterprise
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2019-25257
LogicalDOC Srl - LogicalDOC Enterprise
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2024-12245
LogicalDOC - LogicalDOC Community
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2024-12245
LogicalDOC - LogicalDOC Community
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2024-54445
LogicalDOC - LogicalDOC Community
#vulnerabilitylookup #vulnerability #cybersecurity #bot
https://vulnerability.circl.lu/vuln/CVE-2024-54445
LogicalDOC - LogicalDOC Community
#vulnerabilitylookup #vulnerability #cybersecurity #bot
Explore our analysis into the eight vulnerabilities discovered in LogicalDOC DMS. Vulnerabilities include SQL injection, remote code execution, and XSS.
#hackernews #news
Explore our analysis into the eight vulnerabilities discovered in LogicalDOC DMS. Vulnerabilities include SQL injection, remote code execution, and XSS.
#hackernews #news
CVE ID : CVE-2019-25257
Published : Dec. 24, 2025, 8:15 p.m. | 41 minutes ago
Description : LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command ex...
CVE ID : CVE-2019-25257
Published : Dec. 24, 2025, 8:15 p.m. | 41 minutes ago
Description : LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command ex...