Skip to content
OpenAdvisories

Product · Flexense

Disk Pulse Enterprise

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.5
    CVE-2025-59901

    authenticated reflected XSS vulnerability in Sync Breeze Enterprise Server

    Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send mal…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.2
    CVE-2025-59895

    Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server

    Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process.…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59894

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59893

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59892

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59891

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.6
    CVE-2025-34108 Public exploit

    Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow

    A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer o…

    Flexense Disk Pulse Enterprise
  • High 7.1
    CVE-2023-49575

    XSS vulnerability in VX Search Enterprise

    A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setup_smtp i…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server VX Search Enterprise
  • High 7.1
    CVE-2023-49572

    XSS vulnerability in VX Search Enterprise

    A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setup_odbc in odbc_data_source, odbc_user and odbc_password pa…

    Flexense Disk Pulse Enterprise VX Search Enterprise