Vendor
Devolutions
199 known vulnerabilities.
Products
199 results · Feed
-
Low 3.3
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Serv…
-
High 7.1
Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authe…
-
High 7.5
Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.2…
-
High 7.3
Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attac…
-
Medium 6.5
Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 …
-
High 7.2
Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 202…
-
Low 2.7
Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows …
-
High 7.5
Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier all…
-
Medium 6.5
Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments vi…
-
Medium 4.3
Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated …
-
Medium 4.3
Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authentica…
-
Medium 5.5
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an …
-
High 8.8
Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or mo…
-
Medium 5.3
Improper access control on the API documentation endpoint in PowerShell Universal
Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.
-
Medium 6.5
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Ser…
-
Medium 4.3
Missing authorization in the deleted user groups API in Devolutions Server allows an authenticated low-privileged user …
-
Medium 6.5
Improper access control in the ticketing integration settings in Devolutions Server allows an authenticated low-privile…
-
Medium 5.4
Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an auth…
-
Medium 5.3
Improper access control in the permission validation component in Devolutions Server 2026.1.19 and earlier allows an au…
-
High 7.1
Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authentic…
-
Medium 5.4
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authentic…
-
Medium 4.3
Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with acces…
-
Low 2.7
Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server a…
-
Medium 4.3
Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticate…
-
Medium 4.3
Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory…
-
Low 3.1
Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the p…
-
Medium 5.0
Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated …
-
Low 2.4
Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permiss…
-
Low 2.6
Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write acc…
-
Medium 4.3
Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privilege…
-
High 7.6
Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allow…
-
Medium 4.3
Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attack…
-
Medium 4.3
Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no ad…
-
Medium 6.5
Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to re…
-
Medium 4.3
Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticat…
-
Medium 5.0
Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authent…
-
Medium 5.0
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administr…
-
Medium 6.5
Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management priv…
-
High 8.2
Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allo…
-
High 8.2
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote at…