PatchTheCVECVE-2025-12547: A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1
CVE-2025-12547 is a low-severity flaw (CVSS 3.7) affecting logicaldoc. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-10-07 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-12547?
logicaldoc: upgrade to newer than 9.2.1. Exact commands for each OS are on this page.
Is CVE-2025-12547 being exploited?
CVE-2025-12547 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-12547 affect?
CVE-2025-12547 affects logicaldoc. Severity is low (CVSS 3.7). A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authe
How urgent is CVE-2025-12547?
Priority 37/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2025-11946 LOW 3.5 UPGRADE A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1
- CVE-2025-12546 LOW 3.5 UPGRADE A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1
- CVE-2024-54448 HIGH 7.2 UPGRADE The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the u
- CVE-2024-54449 HIGH 8.8 UPGRADE The API used to interact with documents in the application contains two endpoints with a flaw that allows an a
- CVE-2024-12020 MEDIUM 6.1 DOWNGRADE There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance