Server

63 results · Clear filters · Feed

• Medium 4.9
  CVE-2026-3221

  Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which …

  Devolutions Server
  Feb 25, 2026
• Medium 6.5
  CVE-2026-3131

  Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an aut…

  Devolutions Server
  Feb 24, 2026
• Medium 6.5
  CVE-2025-13683

  Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affe…

  Devolutions Server Remote Desktop Manager
  Nov 28, 2025
• Medium 4.3
  CVE-2025-13765

  Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects D…

  Devolutions Server
  Nov 27, 2025
• Medium 6.5
  CVE-2025-12808

  Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as…

  Devolutions Server
  Nov 6, 2025
• Medium 5.1
  CVE-2025-11958

  An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier …

  Devolutions Server
  Oct 22, 2025
• Medium 5.9
  CVE-2025-8353

  UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 a…

  Devolutions Server
  Jul 30, 2025
• Medium 5.0
  CVE-2025-0691

  Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated …

  Devolutions Server
  Jun 5, 2025
• Medium 6.8
  CVE-2025-5382

  Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manag…

  Devolutions Server
  Jun 5, 2025
• Medium 5.0
  CVE-2025-3768

  Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authent…

  Devolutions Server
  Jun 5, 2025
• Medium 6.5
  CVE-2025-4493

  Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requ…

  Devolutions Server
  May 28, 2025
• Medium 4.3
  CVE-2025-4316

  Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even …

  Devolutions Server
  May 5, 2025
• Medium 6.5
  CVE-2025-2278

  Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 an…

  Devolutions Server
  Mar 13, 2025
• Medium 5.4
  CVE-2025-1231

  Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reu…

  Devolutions Server
  Feb 11, 2025
• Medium 4.3
  CVE-2024-12148

  Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authe…

  Devolutions Server
  Dec 4, 2024
• Medium 5.0
  CVE-2024-12151

  Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users…

  Devolutions Server
  Dec 4, 2024
• Medium 6.5
  CVE-2024-12196

  Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticate…

  Devolutions Server
  Dec 4, 2024
• Medium 6.3
  CVE-2024-4846

  Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker…

  Devolutions Server
  Jun 25, 2024
• Medium 6.5
  CVE-2024-5072

  Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenti…

  Devolutions Server
  May 17, 2024
• Medium 4.3
  CVE-2024-3545

  Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and ear…

  Devolutions Server Remote Desktop Manager
  Apr 9, 2024
• Medium 5.5
  CVE-2024-1900

  Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier …

  Devolutions Server
  Mar 5, 2024
• Medium 4.3
  CVE-2024-1901

  Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an auth…

  Devolutions Server
  Mar 5, 2024
• Medium 6.5
  CVE-2023-1603

  Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versi…

  Devolutions Server
  Mar 23, 2023