Skip to main content

Flexense

Vendor security scorecard – 21 CVEs in the selected period

Period: 30d 90d 6m 1y All
Risk 177
21
CVEs
0
Critical
16
High
0
KEV
11
PoC
16
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS

Severity Breakdown

CRITICAL
0
HIGH
16
MEDIUM
5
LOW
0

Monthly CVE Trend

Top Risky CVEs

CVE Summary Severity CVSS EPSS Priority Signals
CVE-2020-36881 Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field. HIGH 7.8 0.0% 59
PoC No patch
CVE-2020-37100 Syncbreeze versions up to 12.4.18 contains a vulnerability that allows attackers to execute arbitrary code with elevated system privileges (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2020-36880 Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system. HIGH 7.8 0.0% 59
PoC No patch
CVE-2020-36927 Diskpulse versions up to 13.6.14 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2020-36930 Sysgauge versions up to 7.9.18 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2021-47805 Disksavvy versions up to 13.6.14 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2021-47806 Dup Scout versions up to 13.5.28 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2021-47807 Sync Breeze versions up to 13.6.18 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2021-47809 Disk Sorter versions up to 13.6.12 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8). HIGH 7.8 0.0% 59
PoC No patch
CVE-2020-36882 Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application. HIGH 7.5 0.2% 58
PoC No patch
CVE-2020-36946 SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an oversized payload in the login request to overwhelm the application and potentially disrupt service availability. [CVSS 7.5 HIGH] HIGH 7.5 0.1% 58
PoC No patch
CVE-2025-59891 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. [CVSS 8.0 HIGH] HIGH 8.0 0.0% 40
No patch
CVE-2025-59892 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. [CVSS 8.0 HIGH] HIGH 8.0 0.0% 40
No patch
CVE-2025-59893 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. [CVSS 8.0 HIGH] HIGH 8.0 0.0% 40
No patch
CVE-2025-59894 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. [CVSS 8.0 HIGH] HIGH 8.0 0.0% 40
No patch

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy