CVE-2023-49572: high-severity vulnerability in Flexense VX Search Enterprise
XSS vulnerability in VX Search Enterprise
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.3%
exploitation probability
0.3%top 84% of all CVEs
observed exploitation
nono source reports it
A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setup_odbc in odbc_data_source, odbc_user and odbc_password parameters. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Related CVEs — Flexense VX Search Enterprise
In the same product, most dangerous first.
CVE-2025-59895HIGHRemote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise ServerEPSS 0.4%CVE-2023-49575HIGHXSS vulnerability in VX Search EnterpriseEPSS 0.3%CVE-2023-49574HIGHXSS vulnerability in VX Search EnterpriseEPSS 0.3%CVE-2023-49573HIGHXSS vulnerability in VX Search EnterpriseEPSS 0.3%CVE-2025-59900MEDIUMAuthenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise ServerEPSS 0.2%CVE-2025-59899MEDIUMAuthenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise ServerEPSS 0.2%