Synergetic Data Systems vulnerabilities
We track 2 vulnerabilities in Synergetic Data Systems products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Synergetic Data Systems vulnerabilities
- 8.7 High severity
UnForm Server: Improper Limitation of a Pathname to a Restricted Directory
UnForm Server versions < 10.1.15 contain an unauthenticated arbitrary file read and SMB coercion vulnerability in the Doc Flow feature’s 'arc' endpoint. The Doc Flow module uses the 'arc' handler to retrieve and render pages or resources specified by the user-
- 9.2 Critical severity
UnForm Server Manager: Improper Limitation of a Pathname to a Restricted Directory
UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient