https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-59900.htmlhttps://patchthecve.com/cve/CVE-2025-59900.htmlWed, 17 Jun 2026 09:46:51 +0000MEDIUM 5.4: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user inphttps://patchthecve.com/cve/CVE-2025-59899.htmlhttps://patchthecve.com/cve/CVE-2025-59899.htmlWed, 17 Jun 2026 09:46:51 +0000MEDIUM 5.4: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user inphttps://patchthecve.com/cve/CVE-2025-59898.htmlhttps://patchthecve.com/cve/CVE-2025-59898.htmlWed, 17 Jun 2026 09:46:51 +0000MEDIUM 5.4: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user inphttps://patchthecve.com/cve/CVE-2025-59897.htmlhttps://patchthecve.com/cve/CVE-2025-59897.htmlWed, 17 Jun 2026 09:46:51 +0000MEDIUM 5.4: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user inphttps://patchthecve.com/cve/CVE-2025-59896.htmlhttps://patchthecve.com/cve/CVE-2025-59896.htmlWed, 17 Jun 2026 09:46:51 +0000MEDIUM 5.4: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attacker could send malicious content to an authenticated user and steal information from their session due to insufficient validation of user inphttps://patchthecve.com/cve/CVE-2025-59895.htmlhttps://patchthecve.com/cve/CVE-2025-59895.htmlWed, 17 Jun 2026 09:46:50 +0000HIGH 7.5: Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious requesthttps://patchthecve.com/cve/CVE-2025-59894.htmlhttps://patchthecve.com/cve/CVE-2025-59894.htmlWed, 17 Jun 2026 09:46:50 +0000HIGH 8.0: Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of prophttps://patchthecve.com/cve/CVE-2025-59893.htmlhttps://patchthecve.com/cve/CVE-2025-59893.htmlWed, 17 Jun 2026 09:46:50 +0000HIGH 8.0: Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of prophttps://patchthecve.com/cve/CVE-2025-59892.htmlhttps://patchthecve.com/cve/CVE-2025-59892.htmlWed, 17 Jun 2026 09:46:50 +0000HIGH 8.0: Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of prophttps://patchthecve.com/cve/CVE-2025-59891.htmlhttps://patchthecve.com/cve/CVE-2025-59891.htmlWed, 17 Jun 2026 09:46:50 +0000HIGH 8.0: Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of prophttps://patchthecve.com/cve/CVE-2020-36927.htmlhttps://patchthecve.com/cve/CVE-2020-36927.htmlWed, 17 Jun 2026 03:16:31 +0000HIGH 7.8: DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Pulse Enterprise\bin\diskpls.exe' to inject malicious