Server

112 results · Feed

• Medium 5.9
  CVE-2025-8353

  UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 a…

  Devolutions Server
  Jul 30, 2025
• High 7.1
  CVE-2025-6741

  Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unautho…

  Devolutions Server
  Jul 22, 2025
• Critical 9.5
  CVE-2025-6523

  Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker …

  Devolutions Server
  Jul 22, 2025
• Medium 5.0
  CVE-2025-0691

  Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated …

  Devolutions Server
  Jun 5, 2025
• Medium 6.8
  CVE-2025-5382

  Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manag…

  Devolutions Server
  Jun 5, 2025
• Medium 5.0
  CVE-2025-3768

  Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authent…

  Devolutions Server
  Jun 5, 2025
• High 8.7
  CVE-2025-4433

  Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrati…

  Devolutions Server
  May 30, 2025
• Medium 6.5
  CVE-2025-4493

  Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requ…

  Devolutions Server
  May 28, 2025
• Medium 4.3
  CVE-2025-4316

  Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even …

  Devolutions Server
  May 5, 2025
• High 8.1
  CVE-2025-2280

  Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an aut…

  Devolutions Server
  Mar 13, 2025
• Medium 6.5
  CVE-2025-2278

  Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 an…

  Devolutions Server
  Mar 13, 2025
• High 7.5
  CVE-2025-2277

  Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a use…

  Devolutions Server
  Mar 13, 2025
• High 7.1
  CVE-2025-2003

  Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypas…

  Devolutions Server
  Mar 5, 2025
• Medium 5.4
  CVE-2025-1231

  Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reu…

  Devolutions Server
  Feb 11, 2025
• Medium 4.3
  CVE-2024-12148

  Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authe…

  Devolutions Server
  Dec 4, 2024
• Medium 5.0
  CVE-2024-12151

  Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users…

  Devolutions Server
  Dec 4, 2024
• Medium 6.5
  CVE-2024-12196

  Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticate…

  Devolutions Server
  Dec 4, 2024
• Medium 6.3
  CVE-2024-4846

  Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker…

  Devolutions Server
  Jun 25, 2024
• Medium 6.5
  CVE-2024-5072

  Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenti…

  Devolutions Server
  May 17, 2024
• Medium 4.3
  CVE-2024-3545

  Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and ear…

  Devolutions Server Remote Desktop Manager
  Apr 9, 2024
• Low 3.6
  CVE-2024-2918

  Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker wi…

  Devolutions Server
  Apr 9, 2024
• Critical 9.8
  CVE-2024-2921

  Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated …

  Devolutions Server
  Mar 26, 2024
• High 8.8
  CVE-2024-2915

  Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access …

  Devolutions Server
  Mar 26, 2024
• High 7.6
  CVE-2024-1764

  Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allo…

  Devolutions Server
  Mar 5, 2024
• Low 3.9
  CVE-2024-1898

  Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileg…

  Devolutions Server
  Mar 5, 2024
• Medium 5.5
  CVE-2024-1900

  Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier …

  Devolutions Server
  Mar 5, 2024
• Medium 4.3
  CVE-2024-1901

  Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an auth…

  Devolutions Server
  Mar 5, 2024
• Unscored —
  CVE-2023-6264

  Information leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an unauthenticated attacker …

  Devolutions Server
  Nov 22, 2023
• Unscored —
  CVE-2023-5575

  Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker …

  Devolutions Server
  Oct 16, 2023
• Unscored —
  CVE-2023-5240

  Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with pe…

  Devolutions Server
  Oct 13, 2023
• Low 2.7
  CVE-2023-2400

  Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an admin…

  Devolutions Server
  Jun 20, 2023
• Medium 6.5
  CVE-2023-1603

  Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versi…

  Devolutions Server
  Mar 23, 2023