Flexense vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-59901 Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of High 8.5 · Jan 28, 2026
• CVE-2025-59895 Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore fuHigh 8.2 · Jan 28, 2026
• CVE-2025-59894 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.High 8.5 · Jan 28, 2026
• CVE-2025-59893 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.High 8.5 · Jan 28, 2026
• CVE-2025-59892 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.High 8.5 · Jan 28, 2026
• CVE-2025-59891 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.High 8.5 · Jan 28, 2026
• CVE-2020-36946 SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service.High 8.7 · Jan 27, 2026
• CVE-2025-34105 A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14.Critical 10 · Jul 15, 2025
• CVE-2023-49575 A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse EnterHigh 7.1 · May 24, 2024
• CVE-2023-49574 A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_job inHigh 7.1 · May 24, 2024
• CVE-2023-49573 A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_commanHigh 7.1 · May 24, 2024
• CVE-2023-49572 A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attackeHigh 7.1 · May 24, 2024
• CVE-2020-29659 A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid Critical 9.8 · Dec 9, 2020
• CVE-2018-8065 An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24.High 7.5 · Mar 12, 2018
• CVE-2018-6481 A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a craftedCritical 9.8 · Feb 27, 2018
• CVE-2017-17996 A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14.High 8.8 · Feb 6, 2018
• CVE-2018-5261 An issue was discovered in Flexense DiskBoss 8.8.16 and earlier.High 8.1 · Feb 2, 2018
• CVE-2018-6537 A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending Critical 9.8 · Feb 2, 2018
• CVE-2017-13696 A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, anCritical 9.8 · Jan 24, 2018
• CVE-2018-5359 The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer OverflHigh 8.1 · Jan 23, 2018
• CVE-2018-5262 A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highCritical 9.8 · Jan 12, 2018
• CVE-2017-15665 In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability.High 7.5 · Jan 10, 2018
• CVE-2017-15664 In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability.High 7.5 · Jan 10, 2018
• CVE-2017-15663 In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability.High 7.5 · Jan 10, 2018
• CVE-2017-15662 In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability.High 7.5 · Jan 10, 2018