Devolutions Server

17 results · Feed

• Medium 6.5
  CVE-2026-12105

  Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments vi…

  Devolutions Devolutions Server
  Jun 16, 2026
• Medium 4.3
  CVE-2026-12117

  Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated …

  Devolutions Devolutions Server
  Jun 16, 2026
• Medium 4.3
  CVE-2026-11890

  Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authentica…

  Devolutions Devolutions Server
  Jun 16, 2026
• Medium 4.3
  CVE-2026-1768

  A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to ac…

  Devolutions Devolutions Server
  Feb 24, 2026
• High 8.8
  CVE-2025-11619

  Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers…

  Devolutions Devolutions Server
  Oct 15, 2025
• Medium 6.3
  CVE-2025-3517

  Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM u…

  Devolutions Devolutions Server
  May 1, 2025
• Medium 6.5
  CVE-2024-6512

  Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows au…

  Devolutions Devolutions Server
  Sep 25, 2024
• Unscored —
  CVE-2023-5358

  Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to…

  Devolutions Devolutions Server
  Nov 1, 2023
• Medium 4.9
  CVE-2023-2445

  Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers…

  Devolutions Devolutions Server
  May 2, 2023
• Medium 4.3
  CVE-2023-2118

  Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticate…

  Devolutions Devolutions Server
  Apr 21, 2023
• Unscored —
  CVE-2023-1201

  Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticate…

  Devolutions Devolutions Server
  Mar 6, 2023
• Medium 6.5
  CVE-2023-0952

  Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to ac…

  Devolutions Devolutions Server
  Feb 22, 2023
• High 8.8
  CVE-2023-0951

  Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privi…

  Devolutions Devolutions Server
  Feb 22, 2023
• High 8.8
  CVE-2023-0953

  Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an auth…

  Devolutions Devolutions Server
  Feb 22, 2023
• Medium 6.5
  CVE-2023-0661

  Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.

  Devolutions Devolutions Server
  Feb 3, 2023
• Medium 6.5
  CVE-2022-3781

  Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions …

  Devolutions Remote Desktop Manager Devolutions Server
  Nov 1, 2022
• Unscored —
  CVE-2022-2316

  HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rende…

  Devolutions Devolutions Server
  Jul 6, 2022