GCVE - cpe:2.3:a:logicaldoc:logicaldoc_enterprise:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logicaldoc:logicaldoc_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Logicaldoc (`99ada430-3eaa-506f-a9ea-0ed1b7c980bc`)
Product	Logicaldoc Enterprise (`44b3afb7-133d-5843-8718-6a1591b5226f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-54449`	vulnerable	2026-06-08 06:54:16.559803	Remote Code Execution (RCE) via Arbitrary File Write In Document API The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘write’ privileges on at least one existing document in the application is required to exploit the vulnerability. Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC. Published: 2025-03-14T18:04:20.149Z Updated: 2025-03-18T16:27:46.227Z Open on db.gcve.eu Reference links https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54448`	vulnerable	2026-06-08 06:54:16.556241	Remote Code Execution (RCE) via Automation Scripting The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying operating system. An account with administrator privileges or that has been explicitly granted access to use Automation Scripting is needed to carry out the attack. Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC. Published: 2025-03-14T18:01:25.311Z Updated: 2026-08-26T17:55:52.628Z Open on db.gcve.eu Reference links https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54447`	vulnerable	2026-06-08 06:54:16.555868	Blind SQLi in Saved Search Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables. Published: 2025-03-14T17:57:26.356Z Updated: 2025-03-18T16:37:33.586Z Open on db.gcve.eu Reference links https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54446`	vulnerable	2026-06-08 06:54:16.555403	Blind SQLi in Document History Document history functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables. Published: 2025-03-14T17:53:01.300Z Updated: 2025-03-14T18:13:21.649Z Open on db.gcve.eu Reference links https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54445`	vulnerable	2026-06-08 06:54:16.554830	Blind SQLi in Login Login functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables. Published: 2025-03-14T17:49:44.090Z Updated: 2025-03-14T18:15:11.612Z Open on db.gcve.eu Reference links https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12245`	vulnerable	2026-06-08 06:23:51.517193	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12020`	vulnerable	2026-06-08 06:23:51.017207	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12019`	vulnerable	2026-06-08 06:23:51.016680	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47418`	vulnerable	2026-06-08 05:50:40.402618	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47417`	vulnerable	2026-06-08 05:50:40.402236	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47416`	vulnerable	2026-06-08 05:50:40.401771	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47415`	vulnerable	2026-06-08 05:50:40.398685	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.