LogicalDOC kayıtları

logicaldoc üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

19 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
41Planlayın	CVE-2020-9423İstismar yok	LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the databalogicaldoc · logicaldoc · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%5,0	18 Mar 2020
35İzleyin	CVE-2017-1000022İstismar yok	LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation.logicaldoc · logicaldoc · CWE-732	Yüksek8,8	—	%1,2	17 Tem 2017
35İzleyin	CVE-2017-1000021İstismar yok	LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents.logicaldoc · logicaldoc · CWE-611 XXE	Yüksek8,8	—	%1,2	17 Tem 2017
34İzleyin	CVE-2024-54449İstismar yok	Remote Code Execution (RCE) via Arbitrary File Write In Document APIlogicaldoc · logicaldoc · CWE-23 RCE Yol geçişi	Yüksek8,7	—	%0,6	14 Mar 2025
34İzleyin	CVE-2024-54448İstismar yok	Remote Code Execution (RCE) via Automation Scriptinglogicaldoc · logicaldoc · CWE-94 RCE	Yüksek8,6	—	%0,6	14 Mar 2025
31İzleyin	CVE-2020-13542İstismar yok	A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation.logicaldoc · logicaldoc · CWE-276 Yerel yetki yükseltme	Yüksek7,8	—	%0,6	3 Ara 2020
30İzleyin	CVE-2020-10366İstismar yok	LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365.logicaldoc · logicaldoc · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%1,5	7 Nis 2020
28İzleyin	CVE-2019-9723İstismar yok	LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of dirlogicaldoc · logicaldoc · CWE-22 Yol geçişi	Yüksek7,1	—	%1,3	30 May 2019
28İzleyin	CVE-2019-25258İstismar yok	LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilitieslogicaldoc · logicaldoc · CWE-22 Yol geçişi	Yüksek7,1	—	%1,1	24 Ara 2025
26İzleyin	CVE-2020-10365İstismar yok	LogicalDoc before 8.3.3 allows SQL Injection.logicaldoc · logicaldoc · CWE-89 SQL enjeksiyonu	Orta6,5	—	%1,3	18 Mar 2020
25İzleyin	CVE-2024-12020İstismar yok	Reflected Cross-Site Scripting (XSS)logicaldoc · logicaldoc · CWE-79 Kimlik doğrulamasız XSS	Orta6,4	—	%0,3	14 Mar 2025
21İzleyin	CVE-2017-1000023İstismar yok	LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document.logicaldoc · logicaldoc · CWE-79 XSS	Orta5,4	—	%0,5	17 Tem 2017
21İzleyin	CVE-2022-47418İstismar yok	LogicalDOC Document Version Comment Stored XSSlogicaldoc · logicaldoc · CWE-79 XSS	Orta5,4	—	%0,5	7 Şub 2023
21İzleyin	CVE-2022-47417İstismar yok	LogicalDOC Document File Name Stored XSSlogicaldoc · logicaldoc · CWE-79 XSS	Orta5,4	—	%0,5	7 Şub 2023
21İzleyin	CVE-2022-47416İstismar yok	LogicalDOC Chat Stored XSSlogicaldoc · logicaldoc · CWE-79 XSS	Orta5,4	—	%0,5	7 Şub 2023
21İzleyin	CVE-2022-47415İstismar yok	LogicalDOC Messaging Stored XSSlogicaldoc · logicaldoc · CWE-79 XSS	Orta5,4	—	%0,5	7 Şub 2023
11İzleyin	CVE-2025-12547İstismar yok	LogicalDOC Community Edition Admin Login login.jsp excessive authenticationlogicaldoc · logicaldoc · CWE-307 Kimlik doğrulamasız	Düşük2,9	—	%0,8	31 Eki 2025
8İzleyin	CVE-2025-11946İstismar yok	LogicalDOC Community Edition Add Contact frontend.jsp cross site scriptinglogicaldoc · logicaldoc · CWE-79 XSS	Düşük2,0	—	%0,4	19 Eki 2025
8İzleyin	CVE-2025-12546İstismar yok	LogicalDOC Community Edition API Key creation UI cross site scriptinglogicaldoc · logicaldoc · CWE-79 XSS	Düşük2,0	—	%0,3	31 Eki 2025

CVE-2020-9423
41Planlayın
LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the databa
KritikCVSS 9,8İstismar yokEPSS %5
- pre-auth RCE
- Dosya yükleme
logicaldoc · logicaldoc18 Mar 2020
CVE-2017-1000022
35İzleyin
LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation.
YüksekCVSS 8,8İstismar yokEPSS %1
logicaldoc · logicaldoc17 Tem 2017
CVE-2017-1000021
35İzleyin
LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents.
YüksekCVSS 8,8İstismar yokEPSS %1
- XXE
logicaldoc · logicaldoc17 Tem 2017
CVE-2024-54449
34İzleyin
Remote Code Execution (RCE) via Arbitrary File Write In Document API
YüksekCVSS 8,7İstismar yokEPSS %1
- RCE
- Yol geçişi
logicaldoc · logicaldoc14 Mar 2025
CVE-2024-54448
34İzleyin
Remote Code Execution (RCE) via Automation Scripting
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
logicaldoc · logicaldoc14 Mar 2025
CVE-2020-13542
31İzleyin
A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation.
YüksekCVSS 7,8İstismar yokEPSS %1
- Yerel yetki yükseltme
logicaldoc · logicaldoc3 Ara 2020
CVE-2020-10366
30İzleyin
LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
logicaldoc · logicaldoc7 Nis 2020
CVE-2019-9723
28İzleyin
LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of dir
YüksekCVSS 7,1İstismar yokEPSS %1
- Yol geçişi
logicaldoc · logicaldoc30 May 2019
CVE-2019-25258
28İzleyin
LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %1
- Yol geçişi
logicaldoc · logicaldoc24 Ara 2025
CVE-2020-10365
26İzleyin
LogicalDoc before 8.3.3 allows SQL Injection.
OrtaCVSS 6,5İstismar yokEPSS %1
- SQL enjeksiyonu
logicaldoc · logicaldoc18 Mar 2020
CVE-2024-12020
25İzleyin
Reflected Cross-Site Scripting (XSS)
OrtaCVSS 6,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
logicaldoc · logicaldoc14 Mar 2025
CVE-2017-1000023
21İzleyin
LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
logicaldoc · logicaldoc17 Tem 2017
CVE-2022-47418
21İzleyin
LogicalDOC Document Version Comment Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc7 Şub 2023
CVE-2022-47417
21İzleyin
LogicalDOC Document File Name Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc7 Şub 2023
CVE-2022-47416
21İzleyin
LogicalDOC Chat Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc7 Şub 2023
CVE-2022-47415
21İzleyin
LogicalDOC Messaging Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc7 Şub 2023
CVE-2025-12547
11İzleyin
LogicalDOC Community Edition Admin Login login.jsp excessive authentication
DüşükCVSS 2,9İstismar yokEPSS %1
- Kimlik doğrulamasız
logicaldoc · logicaldoc31 Eki 2025
CVE-2025-11946
8İzleyin
LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc19 Eki 2025
CVE-2025-12546
8İzleyin
LogicalDOC Community Edition API Key creation UI cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
logicaldoc · logicaldoc31 Eki 2025