Disk Pulse Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:flexense:disk_pulse_enterprise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Flexense (0cbcbab9-d7d0-546e-93f4-bdd36a312974) |
|---|---|
| Product | Disk Pulse Enterprise (0d31931c-9bc0-509e-94f0-d8e323b53db2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59901 |
vulnerable | 2026-06-08 07:35:23.396333 |
authenticated reflected XSS vulnerability in Sync Breeze Enterprise Server
Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send malicious content to an authenticated user and steal information from their session.
Published: 2026-01-28T12:01:30.669Z
Updated: 2026-01-28T15:16:54.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59900 |
vulnerable | 2026-06-08 07:35:23.395457 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T12:00:05.516Z
Updated: 2026-01-28T15:23:07.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59899 |
vulnerable | 2026-06-08 07:35:23.394746 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T11:59:02.326Z
Updated: 2026-01-28T15:26:31.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59898 |
vulnerable | 2026-06-08 07:35:23.393881 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/add_exclude_dir?sid=', affecting the 'exclude_dir' parameter.
Published: 2026-01-28T11:58:44.144Z
Updated: 2026-01-28T15:32:32.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59897 |
vulnerable | 2026-06-08 07:35:23.393271 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/edit_command?sid=', affecting the 'source_dir' and ‘dest_dir’ parameters.
Published: 2026-01-28T11:58:28.711Z
Updated: 2026-01-28T15:34:32.254Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59896 |
vulnerable | 2026-06-08 07:35:23.392481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59895 |
vulnerable | 2026-06-08 07:35:23.391558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59894 |
vulnerable | 2026-06-08 07:35:23.390693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59893 |
vulnerable | 2026-06-08 07:35:23.381123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59892 |
vulnerable | 2026-06-08 07:35:23.380639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59891 |
vulnerable | 2026-06-08 07:35:23.376939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49575 |
vulnerable | 2026-06-08 06:14:29.188461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49572 |
vulnerable | 2026-06-08 06:14:29.184467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.