Advisories · Technology

Devolutions Server.

Every CVE that names Devolutions Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-2118 CVE record

CVSS 4.3 Medium

Devolutions Server: Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0…
- Devolutions Server
Not analysed yet 21 Apr 2023
CVE-2023-1603 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 23 Mar 2023
CVE-2023-1201 CVE record

Devolutions Server: Improper access control in the secure messages feature in Devolutions Server 2022.3.12…
- Devolutions Server
Not analysed yet 6 Mar 2023
CVE-2023-0952 CVE record

CVSS 6.5 Medium

Incorrect authorization in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 22 Feb 2023
CVE-2023-0951 CVE record

CVSS 8.8 High

Devolutions Server: Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and…
- Devolutions Server
Not analysed yet 22 Feb 2023
CVE-2023-0953 CVE record

CVSS 8.8 High

SQL injection in Devolutions Server
- Devolutions Server
- SQL injection
Not analysed yet 22 Feb 2023
CVE-2023-0661 CVE record

CVSS 6.5 Medium

Improper access control in Devolutions Server
- Devolutions Server
- Broken access control
Not analysed yet 3 Feb 2023
CVE-2022-3781 CVE record

CVSS 6.5 Medium

Missing encryption of sensitive data in Devolutions Remote Desktop Manager and others
- Devolutions Remote Desktop Manager
- Devolutions Server
- Weak cryptography or TLS
Not analysed yet 1 Nov 2022
CVE-2022-2316 CVE record

Devolutions Server: HTML injection vulnerability in secure messages of Devolutions Server before 2022.2…
- Devolutions Server
Not analysed yet 6 Jul 2022