devolutions Server Vulnerabilities
Devolutions Server vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Improper Access Control in Devolutions Server Affects PAM Users
CVE-2025-4316DevolutionsServer4.3MEDIUMPrivilege Context Switching Flaw in Devolutions Server
CVE-2025-3517DevolutionsDevolutions Server6.3MEDIUMAccess Control Flaw in Devolutions Server Web Extension
CVE-2025-2280DevolutionsServer8.1HIGHAccess Control Flaw in Devolutions Server 2024.3.13 and Earlier
CVE-2025-2278DevolutionsServer6.5MEDIUMPassword Exposure in Devolutions Server Web-based SSH Authentication
CVE-2025-2277DevolutionsServer7.5HIGHAuthorization Bypass in Devolutions Server by Devolutions
CVE-2025-2003DevolutionsServer7.1HIGHImproper Password Reset in Devolutions Server by Devolutions
CVE-2025-1231DevolutionsServer5.4MEDIUMIncorrect Authorization in Permission Validation Component Leads to Reporting Endpoint Access
CVE-2024-12148DevolutionsServerOld Permission Sets Still Accessible in User Migration
CVE-2024-12151DevolutionsServerIncorrect Authorization in Password History Leads to Data Exposure
CVE-2024-12196DevolutionsDevolutions ServerImproper Access Control in Devolutions DVLS Affects Sensitive Data Security
CVE-2024-10971DevolutionsDvls (devolutions Server)Authorization Bypass Vulnerability in Devolutions Server Products
CVE-2024-6512DevolutionsDevolutions Server6.5MEDIUMAuthentication Bypass Vulnerability Affects Devolutions Server
CVE-2024-4846DevolutionsServerPAM JIT Elevation Feature Vulnerability
CVE-2024-5072DevolutionsServer6.5MEDIUMAttackers Can Access Sensitive Information via Offline Cache Feature in Devolutions Remote Desktop Manager
CVE-2024-3545DevolutionsServerPAM JIT Elevation Feature Vulnerability
CVE-2024-2918DevolutionsServerUnauthorized Access to PAM Entries via Improper Permissions
CVE-2024-2921DevolutionsServerPAM JIT Elevation Vulnerability Allows Unauthorized Access
CVE-2024-2915DevolutionsServerPrivilege Elevation Vulnerability Affects Devolutions Server
CVE-2024-1764DevolutionsServerImproper Access Control in Notification Feature Allows Low Privileged User to Change Notifications Settings Configured by Administrator
CVE-2024-1898DevolutionsServer4.3MEDIUMStay Authenticated After User Disable or Delete in Identity Provider
CVE-2024-1900DevolutionsServerPAM Password Rotation Vulnerability Allows Denial of Service
CVE-2024-1901DevolutionsServerInformation Leak in Devolutions Server's Content-Security-Policy Header
CVE-2023-6264DevolutionsServer5.3MEDIUMImproper Access Control in Devolutions Server Affects Sensitive Log Retrieval
CVE-2023-5358DevolutionsDevolutions Server5.3MEDIUMImproper Access Control in Devolutions Server by Devolutions
CVE-2023-5575DevolutionsServer6.5MEDIUM