Sync Breeze

Vendor:

First CVE: Mar 29, 2017 · Active for 9 years

24

Total CVEs

Bottom 1%

8.0

Avg CVEs / Year

Bottom 1%

7.5

Avg CVSS

Higher Avg CVSS than 63% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Sync Breeze over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 29, 2017

9 years ago

Most Recent CVE

Feb 3, 2026

171 days ago

CVE Severity & Scoring

Sync Breeze24 CVEs

25%

63%

13%

All CVEs352,231 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local5 (20.8%)

Network19 (79.2%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low24 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None12 (50.0%)

Unknown0 (0.0%)

Required12 (50.0%)

Privileges Required

Low13 (54.2%)

High0 (0.0%)

None11 (45.8%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (24 CVEs).

24 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2018-8065HIGH An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory region that can be trigge	Mar 12, 2018	7.5	82	NO	YES
CVE-2017-13696CRITICAL A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterpr	Jan 24, 2018	9.8	81	NO	YES
CVE-2017-7310HIGH A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout bef	Mar 29, 2017	7.8	74	NO	YES
CVE-2017-14980CRITICAL Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.	Oct 10, 2017	9.8	53	NO	YES
CVE-2017-17088HIGH The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests	Dec 19, 2017	7.5	38	NO	YES
CVE-2017-15950HIGH Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long inpu	Oct 31, 2017	7.8	38	NO	YES
CVE-2017-15664HIGH In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to cont	Jan 10, 2018	7.5	35	NO	YES
CVE-2018-6537CRITICAL A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to	Feb 2, 2018	9.8	32	NO	NO
CVE-2017-17099HIGH There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive	Dec 3, 2017	7.8	29	NO	NO
CVE-2017-17996HIGH A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker	Feb 6, 2018	8.8	27	NO	NO

View all 24 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (24 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

4 CVEs

16.7% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

20.8% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (24 CVEs).

Media Mentions

Signals from CVEs in this product scope (24 CVEs).

Top CNAs Publishing CVEs For Sync Breeze

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
9.9.16	1	9.8	79.3%	1
9.5.16	1	7.8	53.6%	1
13.6.18	1	7.8	0.2%	0
12.4.18	1	7.8	0.2%	0
10.6.24	1	7.5	76.3%	1
10.4.18	11	6.9	0.5%	0
10.1.16	3	7.7	8.8%	2
10.0.28	2	8.7	11.6%	1