Skip to content
OpenAdvisories

Product · LogicalDOC

LogicalDOC Community

7 known vulnerabilities.

LogicalDOC Community at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202570
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 8.7
    CVE-2024-12245

    Blind SQL Injection in Logout

    Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence …

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 7.1
    CVE-2024-12019

    Arbitrary File Read via Document API

    The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with ‘read’ and ‘download’ privileges on at least one existing docume…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 8.7
    CVE-2024-54449

    Remote Code Execution (RCE) via Arbitrary File Write In Document API

    The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 8.6
    CVE-2024-54448

    Remote Code Execution (RCE) via Automation Scripting

    The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying operating system. An account with administrator privileges or that has been explicitly granted access to use Automation Scripting is needed…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 7.1
    CVE-2024-54447

    Blind SQLi in Saved Search

    Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the prese…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 7.1
    CVE-2024-54446

    Blind SQLi in Document History

    Document history functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the p…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community
  • High 8.7
    CVE-2024-54445

    Blind SQLi in Login

    Login functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence o…

    LogicalDOC LogicalDOC Enterprise LogicalDOC Community