Vulnerabilities (CVE)

Filtered by vendor Devolutions Subscribe
Filtered by product Devolutions Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-33996 1 Devolutions 1 Devolutions Server 2022-07-14 6.5 MEDIUM 8.8 HIGH
Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user.
CVE-2021-28157 1 Devolutions 1 Devolutions Server 2021-04-21 6.5 MEDIUM 7.2 HIGH
An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.
CVE-2021-23924 1 Devolutions 1 Devolutions Server 2021-04-06 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files.
CVE-2021-23923 1 Devolutions 1 Devolutions Server 2021-04-06 4.9 MEDIUM 8.1 HIGH
An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users.