Approved changes feed: RSS · Atom
cpe:2.3:a:flexense:diskpulse:10.4.18:*:*:*:enterprise:*:*:*
part: a version: 10.4.18 update: *
| Vendor | Flexense (0cbcbab9-d7d0-546e-93f4-bdd36a312974) |
|---|---|
| Product | Diskpulse (f03c8b6e-e263-59f0-b6b9-900e6e7d9a13) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59900 |
vulnerable | 2026-06-08 07:35:23.395738 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T12:00:05.516Z
Updated: 2026-01-28T15:23:07.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59899 |
vulnerable | 2026-06-08 07:35:23.394926 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/server_options?sid=', affecting the 'tasks_logs_dir', 'errors_logs_dir', 'error_notifications_address', 'status_notifications_address', and 'status_reports_address' parameters.
Published: 2026-01-28T11:59:02.326Z
Updated: 2026-01-28T15:26:31.667Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59898 |
vulnerable | 2026-06-08 07:35:23.393959 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/add_exclude_dir?sid=', affecting the 'exclude_dir' parameter.
Published: 2026-01-28T11:58:44.144Z
Updated: 2026-01-28T15:32:32.025Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59897 |
vulnerable | 2026-06-08 07:35:23.393345 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/edit_command?sid=', affecting the 'source_dir' and ‘dest_dir’ parameters.
Published: 2026-01-28T11:58:28.711Z
Updated: 2026-01-28T15:34:32.254Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59896 |
vulnerable | 2026-06-08 07:35:23.392564 |
Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user input in '/add_command?sid=', affecting the 'command_name' parameter.
Published: 2026-01-28T11:58:13.762Z
Updated: 2026-01-28T15:35:37.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59895 |
vulnerable | 2026-06-08 07:35:23.391900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59894 |
vulnerable | 2026-06-08 07:35:23.390864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59893 |
vulnerable | 2026-06-08 07:35:23.390056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59892 |
vulnerable | 2026-06-08 07:35:23.380721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59891 |
vulnerable | 2026-06-08 07:35:23.379115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.