GCVE - cpe:2.3:a:logicaldoc:community_edition:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:logicaldoc:community_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Logicaldoc (`99ada430-3eaa-506f-a9ea-0ed1b7c980bc`)
Product	Community Edition (`ac57895a-1f4b-5a0f-a1c2-57e144b9fd01`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-12547`	vulnerable	2026-06-08 07:04:30.420741	LogicalDOC Community Edition Admin Login login.jsp excessive authentication LOW (3.7) A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the file /login.jsp of the component Admin Login Page. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-31T18:32:08.209Z Updated: 2025-10-31T18:55:56.744Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330807 https://vuldb.com/?ctiid.330807 https://vuldb.com/?submit.677172 https://gist.github.com/thezeekhan/869aeb01bd981667c35dcac3e72c2bfa	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12546`	vulnerable	2026-06-08 07:04:30.415268	LogicalDOC Community Edition API Key creation UI cross site scripting LOW (3.5) A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1. This affects an unknown part of the component API Key creation UI. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-31T18:32:05.885Z Updated: 2025-10-31T18:59:31.730Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330806 https://vuldb.com/?ctiid.330806 https://vuldb.com/?submit.677170 https://gist.github.com/thezeekhan/fa0dcfda4f1f915c625d3f89f8ec0529	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11946`	vulnerable	2026-06-08 07:04:29.449827	LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting LOW (3.5) A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-10-19T21:32:06.214Z Updated: 2025-10-20T18:03:53.761Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329026 https://vuldb.com/?ctiid.329026 https://vuldb.com/?submit.671389 https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90 https://gist.github.com/thezeekhan/231d87163fbb84f94c9c94f13b88db90#steps-to-reproduce	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.