Skip to content
OpenAdvisories

Product · Flexense

Sync Breeze Enterprise Server

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.5
    CVE-2025-59901

    authenticated reflected XSS vulnerability in Sync Breeze Enterprise Server

    Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send mal…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.2
    CVE-2025-59895

    Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server

    Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process.…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59894

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59893

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59892

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 8.5
    CVE-2025-59891

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

    Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerab…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server
  • High 7.1
    CVE-2023-49575

    XSS vulnerability in VX Search Enterprise

    A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setup_smtp i…

    Flexense Disk Pulse Enterprise Sync Breeze Enterprise Server VX Search Enterprise