CVE-2025-59901

Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitordirectory?sid=' endpoint, caused by insufficient validation of the 'monitordirectory' parameter sent by POST. An attacker could exploit this weakness to send malicious content to an authenticated user...

CVE-2025-59901

CVE-2025-59901 describes an authenticated reflected XSS in Disk Pulse Enterprise v10.4.18. The vulnerability is located in the /monitor_directory?sid= endpoint and arises from insufficient validation of the monitor_directory parameter sent via POST. An attacker could craft input that, when viewed...

PT-2026-5109

Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor directory?sid=' endpoint, caused by insufficient validation of the 'monitor directory' parameter sent by POST. An attacker could exploit this weakness to send malicious content to an authenticated use...