Vulnerabilities

TI-2025-37310 CVE-2025-59900 · GHSA-fcg3-c6jm-9qxr

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37309 CVE-2025-59899 · GHSA-cg8j-jfqg-q55w

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37308 CVE-2025-59898 · GHSA-45v9-p764-4x3m

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37307 CVE-2025-59897 · GHSA-jfcj-mjhj-m88q

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37306 CVE-2025-59896 · GHSA-q3p7-5h3x-778g

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37305 CVE-2025-59895 · GHSA-xgm3-v5hc-wc6j

Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server

MEDIUM 42

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00399 Published 2026-01-28 No fix listed CWE-20

TI-2025-37304 CVE-2025-59894 · GHSA-g75h-mgx2-c5rq

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37303 CVE-2025-59893 · GHSA-3376-jw3x-f6j6

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37302 CVE-2025-59892 · GHSA-75rp-pqq4-fpv7

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37301 CVE-2025-59891 · GHSA-33r4-r5rc-phcf

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2020-19062 CVE-2020-36927 · GHSA-jqrw-qrp2-9pg2

DiskPulse 13.6.14 - Unquoted Service Path

HIGH 72

DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00238 Published 2026-01-15 No fix listed CWE-428

TI-2018-07457 CVE-2018-10564 · GHSA-pfj2-rwfm-29f8

XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.

LOW 28

XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2018-05-02 No fix listed CWE-79

TI-2017-09973 CVE-2017-13696 · GHSA-pw6x-q52c-69f8

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise…

HIGH 82

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.78657 Published 2018-01-24 No fix listed CWE-119

Vulnerabilities

Filters