Vendor
Devolutions
199 known vulnerabilities.
Products
105 results · Clear filters · Feed
-
Medium 5.0
Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated …
-
Medium 4.3
Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privilege…
-
Medium 4.3
Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attack…
-
Medium 4.3
Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no ad…
-
Medium 6.5
Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to re…
-
Medium 4.3
Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticat…
-
Medium 5.0
Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authent…
-
Medium 5.0
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administr…
-
Medium 6.5
Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management priv…
-
Medium 5.4
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…
-
Medium 5.5
Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an aut…
-
Medium 5.9
Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a l…
-
Medium 5.5
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client s…
-
Medium 4.9
Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which …
-
Medium 6.5
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an aut…
-
Medium 4.3
A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to ac…
-
Medium 6.1
Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before …
-
Medium 6.5
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affe…
-
Medium 4.3
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects D…
-
Medium 6.5
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as…
-
Medium 5.1
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier …
-
Medium 5.9
UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 a…
-
Medium 5.0
Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated …
-
Medium 6.8
Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manag…
-
Medium 5.0
Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authent…
-
Medium 6.5
Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requ…
-
Medium 4.3
Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even …
-
Medium 6.3
Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM u…
-
Medium 6.8
Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticat…
-
Medium 5.4
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated…
-
Medium 5.4
Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An auth…
-
Medium 6.5
Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 an…
-
Medium 6.5
Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop M…
-
Medium 6.5
Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and…
-
Medium 5.4
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reu…
-
Medium 4.3
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authe…
-
Medium 5.0
Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users…
-
Medium 6.5
Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticate…
-
Medium 5.1
Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
-
Medium 5.4
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earl…