Sync Breeze Enterprise Server vulnerabilities

6 known vulnerabilities in Sync Breeze Enterprise Server from Flexense. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Sync Breeze Enterprise Server: Cross-Site Request Forgery

  CVE-2025-59901Jan 28, 2026Flexense

  Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of the 'monitor_directory' parameter sent by POST. An attacker could exploit this weakness to send mali

• 7.5 High severity

  Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote…

  CVE-2025-59895Jan 28, 2026Flexense

  Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process.

• 8.0 High severity

  Sync Breeze Enterprise Server: Cross-Site Request Forgery

  CVE-2025-59894Jan 28, 2026Flexense

  Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi

• 8.0 High severity

  Sync Breeze Enterprise Server: Cross-Site Request Forgery

  CVE-2025-59893Jan 28, 2026Flexense

  Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi

• 8.0 High severity

  Sync Breeze Enterprise Server: Cross-Site Request Forgery

  CVE-2025-59892Jan 28, 2026Flexense

  Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi

• 8.0 High severity

  Sync Breeze Enterprise Server: Cross-Site Request Forgery

  CVE-2025-59891Jan 28, 2026Flexense

  Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerabi