Sync Breeze Enterprise Server
Approved changes feed: RSS · Atom
cpe:2.3:a:flexense:sync_breeze_enterprise_server:v10.4.18:*:*:*:*:*:*:*
part: a version: v10.4.18 update: *
| Vendor | Flexense (0cbcbab9-d7d0-546e-93f4-bdd36a312974) |
|---|---|
| Product | Sync Breeze Enterprise Server (8e4cb8c7-b054-50ce-8ceb-a911e87e20dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59901 |
vulnerable | 2026-06-08 07:35:23.396366 |
authenticated reflected XSS vulnerability in Sync Breeze Enterprise Server
Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send malicious content to an authenticated user and steal information from their session.
Published: 2026-01-28T12:01:30.669Z
Updated: 2026-01-28T15:16:54.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59900 |
vulnerable | 2026-06-08 07:35:23.395491 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T12:00:05.516Z
Updated: 2026-01-28T15:23:07.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59899 |
vulnerable | 2026-06-08 07:35:23.394870 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T11:59:02.326Z
Updated: 2026-01-28T15:26:31.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59898 |
vulnerable | 2026-06-08 07:35:23.393913 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/add_exclude_dir?sid=', affecting the 'exclude_dir' parameter.
Published: 2026-01-28T11:58:44.144Z
Updated: 2026-01-28T15:32:32.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59897 |
vulnerable | 2026-06-08 07:35:23.393300 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/edit_command?sid=', affecting the 'source_dir' and ‘dest_dir’ parameters.
Published: 2026-01-28T11:58:28.711Z
Updated: 2026-01-28T15:34:32.254Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59896 |
vulnerable | 2026-06-08 07:35:23.392519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59895 |
vulnerable | 2026-06-08 07:35:23.391701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59894 |
vulnerable | 2026-06-08 07:35:23.390719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59893 |
vulnerable | 2026-06-08 07:35:23.381149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59892 |
vulnerable | 2026-06-08 07:35:23.380677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59891 |
vulnerable | 2026-06-08 07:35:23.377837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.