Syncbreeze

This hub aggregates every CVE we track for Syncbreeze, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Syncbreeze.

• CVE-2020-37100Sync Breeze Enterprise 12.4.18 - Unquoted Service Path7.8Feb 3, 2026
• CVE-2025-59900Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server5.4Jan 28, 2026
• CVE-2025-59899Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server5.4Jan 28, 2026
• CVE-2025-59898Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server5.4Jan 28, 2026
• CVE-2025-59897Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server5.4Jan 28, 2026
• CVE-2025-59896Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server5.4Jan 28, 2026
• CVE-2025-59895Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server7.5Jan 28, 2026
• CVE-2025-59894Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.0Jan 28, 2026
• CVE-2025-59893Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.0Jan 28, 2026
• CVE-2025-59892Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.0Jan 28, 2026
• CVE-2025-59891Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server8.0Jan 28, 2026
• CVE-2020-36946SyncBreeze 10.0.28 - 'login' Denial of Service7.5Jan 27, 2026
• CVE-2018-10563An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).6.1May 2, 2018
• CVE-2018-8065An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be triggered by rapidly se...7.5Mar 12, 2018
• CVE-2017-17996A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more ...8.8Feb 6, 2018