Vendor
Devolutions
199 known vulnerabilities.
Products
199 results · Feed
-
Medium 5.4
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…
-
High 8.1
Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-…
-
High 8.3
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker t…
-
Medium 5.5
Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an aut…
-
High 8.3
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authe…
-
Medium 5.9
Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a l…
-
Critical 9.8
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacke…
-
Critical 9.8
Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers…
-
Critical 9.8
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions …
-
Critical 9.8
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and ea…
-
Medium 5.5
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client s…
-
Medium 4.9
Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which …
-
Medium 6.5
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an aut…
-
Medium 4.3
A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to ac…
-
High 7.6
Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass den…
-
Critical 9.8
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thr…
-
Low 3.3
Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Manager 202…
-
Medium 6.1
Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before …
-
Medium 6.5
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affe…
-
Low 3.5
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, thro…
-
High 8.8
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 202…
-
Medium 4.3
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects D…
-
High 8.8
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticate…
-
Medium 6.5
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as…
-
Critical 9.0
Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authent…
-
Medium 5.1
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier …
-
High 8.8
Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers…
-
High 7.1
Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of it…
-
Medium 5.9
UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 a…
-
High 7.1
Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unautho…
-
Critical 9.5
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker …
-
Medium 5.0
Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated …
-
Medium 6.8
Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manag…
-
Medium 5.0
Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authent…
-
High 8.7
Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrati…
-
High 7.5
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote De…
-
Medium 6.5
Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requ…
-
Medium 4.3
Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even …
-
Medium 6.3
Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM u…
-
Medium 6.8
Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticat…