112 results · Feed
-
High 7.1
Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authentic…
-
Medium 5.4
Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authentic…
-
Medium 4.3
Improper access control in the entry activity log feature in Devolutions Server allows an authenticated user with acces…
-
Low 2.7
Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server a…
-
Medium 4.3
Improper access control in the entry documentation and attachment features in Devolutions Server allows an authenticate…
-
Medium 4.3
Missing authorization in the user profile update feature in Devolutions Server allows an authenticated Active Directory…
-
Low 3.1
Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the p…
-
Medium 5.0
Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated …
-
Low 2.4
Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permiss…
-
Low 2.6
Authorization bypass in the entry duplication feature in Devolutions Server allows an authenticated user with write acc…
-
Medium 4.3
Missing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier allows a low-privilege…
-
High 7.6
Improper handling of factor key state in the multi-factor authentication management feature in Devolutions Server allow…
-
Medium 4.3
Improper access control in the notification management endpoints in Devolutions Server allows an unauthenticated attack…
-
Medium 4.3
Missing authorization in the PAM module in Devolutions Server allows an authenticated user with a PAM license but no ad…
-
Medium 6.5
Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to re…
-
Medium 4.3
Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticat…
-
Medium 5.0
Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authent…
-
Medium 5.0
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administr…
-
Medium 6.5
Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management priv…
-
High 8.2
Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allo…
-
High 8.2
Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote at…
-
Medium 5.4
Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an…
-
High 8.1
Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-…
-
Medium 5.9
Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a l…
-
Critical 9.8
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacke…
-
Critical 9.8
Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers…
-
Critical 9.8
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and ea…
-
Medium 4.9
Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which …
-
Medium 6.5
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an aut…
-
High 7.6
Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass den…
-
Critical 9.8
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thr…
-
Medium 6.5
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affe…
-
Low 3.5
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, thro…
-
High 8.8
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 202…
-
Medium 4.3
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects D…
-
High 8.8
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticate…
-
Medium 6.5
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as…
-
Critical 9.0
Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authent…
-
Medium 5.1
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier …
-
High 7.1
Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of it…