Vulnerabilidades em LogicalDOC
15 resultadosAnálise Vexday
LogicalDOC apresenta 15 vulnerabilidades catalogadas, todas de severidade moderada ou baixa, com nenhuma sob exploração ativa conhecida atualmente. A fraqueza dominante é injeção de scripts (CWE-79), típica de plataformas web, sem novos riscos emergentes nos últimos 90 dias, indicando um panorama de risco estável e previsível.
CVE-2025-12547MEDIUMLogicalDOC Community Edition Admin Login login.jsp excessive authenticationEPSS 0.8%CVE-2024-54449HIGHRemote Code Execution (RCE) via Arbitrary File Write In Document APIEPSS 0.6%CVE-2022-47416MEDIUMLogicalDOC Chat Stored XSSEPSS 0.5%CVE-2022-47418MEDIUMLogicalDOC Document Version Comment Stored XSSEPSS 0.5%CVE-2022-47417MEDIUMLogicalDOC Document File Name Stored XSSEPSS 0.5%CVE-2022-47415MEDIUMLogicalDOC Messaging Stored XSSEPSS 0.5%CVE-2024-54448HIGHRemote Code Execution (RCE) via Automation ScriptingEPSS 0.5%CVE-2024-12019HIGHArbitrary File Read via Document APIEPSS 0.4%CVE-2024-54445HIGHBlind SQLi in LoginEPSS 0.3%CVE-2024-12245HIGHBlind SQL Injection in LogoutEPSS 0.3%CVE-2025-11946MEDIUMLogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingEPSS 0.3%CVE-2024-54446HIGHBlind SQLi in Document HistoryEPSS 0.3%CVE-2024-54447HIGHBlind SQLi in Saved SearchEPSS 0.3%CVE-2025-12546MEDIUMLogicalDOC Community Edition API Key creation UI cross site scriptingEPSS 0.3%CVE-2024-12020MEDIUMReflected Cross-Site Scripting (XSS)EPSS 0.2%