PatchTheCVElogicaldoc vulnerabilities
Recent CVEs affecting logicaldoc products. 7 tracked.
logicaldoc has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-24. Highest priority: CVE-2019-25258 (score 53/100).
- CVE-2025-11946 LOW 3.5 UPGRADE A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1
- CVE-2025-12547 LOW 3.7 UPGRADE A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1
- CVE-2025-12546 LOW 3.5 UPGRADE A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1
- CVE-2024-54448 HIGH 7.2 UPGRADE The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the u
- CVE-2024-54449 HIGH 8.8 UPGRADE The API used to interact with documents in the application contains two endpoints with a flaw that allows an a
- CVE-2024-12020 MEDIUM 6.1 DOWNGRADE There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance
- CVE-2019-25258 HIGH 7.5 DOWNGRADE LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow a
FAQ
How do I fix logicaldoc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is logicaldoc being exploited right now?
None of the tracked logicaldoc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which logicaldoc CVE should I patch first?
CVE-2019-25258 currently ranks highest (53/100): LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow a.