Vendor
Devolutions
199 known vulnerabilities.
Products
52 results · Clear filters · Feed
-
High 8.8
Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3…
-
High 8.1
Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier…
-
High 7.5
Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allow…
-
High 8.1
Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an…
-
High 8.7
Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in De…
-
High 7.1
Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user wit…
-
High 7.2
Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attac…
-
High 8.3
Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier al…
-
High 8.1
Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2…
-
High 7.4
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.…
-
High 8.8
Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-ad…
-
High 8.8
Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal …
-
High 8.8
Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2…
-
High 7.1
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authe…
-
High 7.5
Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.2…
-
High 7.3
Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attac…
-
High 7.2
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 202…
-
High 7.5
Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier all…
-
High 8.8
Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or mo…
-
High 7.1
Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authentic…
-
High 7.6
Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allow…
-
High 8.2
Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allo…
-
High 8.2
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote at…
-
High 8.1
Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-…
-
High 8.3
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker t…
-
High 8.3
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authe…
-
High 7.6
Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass den…
-
High 8.8
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 202…
-
High 8.8
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticate…
-
High 8.8
Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers…
-
High 7.1
Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of it…
-
High 7.1
Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unautho…
-
High 8.7
Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrati…
-
High 7.5
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote De…
-
High 8.1
Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an aut…
-
High 7.5
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a use…
-
High 7.1
Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypas…
-
High 8.8
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker t…
-
High 8.1
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and…
-
High 8.1
Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.…