Vendor
Devolutions
199 known vulnerabilities.
Products
105 results · Clear filters · Feed
-
Medium 6.5
Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2…
-
Medium 6.5
Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and e…
-
Medium 4.3
Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2…
-
Medium 4.3
Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allo…
-
Medium 4.3
Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earli…
-
Medium 4.3
Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earli…
-
Medium 6.5
Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user …
-
Medium 4.3
Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated …
-
Medium 6.8
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote atta…
-
Medium 6.8
Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote …
-
Medium 5.0
Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an auth…
-
Medium 5.4
Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticate…
-
Medium 6.5
Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authentica…
-
Medium 5.4
Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authentica…
-
Medium 4.3
Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM ed…
-
Medium 6.5
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal …
-
Medium 4.8
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutio…
-
Medium 6.5
Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authen…
-
Medium 6.5
Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier al…
-
Medium 4.3
Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 …
-
Medium 4.3
Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privile…
-
Medium 4.3
Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only pe…
-
Medium 6.5
Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and ea…
-
Medium 5.0
Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and…
-
Medium 6.5
Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2…
-
Medium 6.5
Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 …
-
Medium 6.5
Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments vi…
-
Medium 4.3
Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated …
-
Medium 4.3
Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authentica…
-
Medium 5.5
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an …
-
Medium 5.3
Improper access control on the API documentation endpoint in PowerShell Universal
Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.
-
Medium 6.5
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Ser…
-
Medium 4.3
Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user …
-
Medium 6.5
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privile…
-
Medium 5.4
Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an auth…
-
Medium 5.3
Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an au…
-
Medium 5.4
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authentic…
-
Medium 4.3
Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with acces…
-
Medium 4.3
Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticate…
-
Medium 4.3
Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory…