12 results · Clear filters · Feed
-
Low 2.6
Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authentic…
-
Low 3.1
Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an au…
-
Low 3.3
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Serv…
-
Low 2.7
Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows …
-
Low 2.7
Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server a…
-
Low 3.1
Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the p…
-
Low 2.4
Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permiss…
-
Low 2.6
Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write acc…
-
Low 3.5
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, thro…
-
Low 3.6
Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker wi…
-
Low 3.9
Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileg…
-
Low 2.7
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an admin…