Skip to contentDevolutions Server vulnerabilities
- devolutions serverImproper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and...CVE-2023-24002.7 Low
- arborator serverArborator Server project.cgi start denial of serviceCVE-2018-250873.5 Low
- devolutions serverImproper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and...CVE-2023-24454.9 Medium
- devolutions serverInsufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below...CVE-2023-21185.4 Medium
- devolutions serverPermission bypass when importing or synchronizing entries in User vault in Devolutions Server...CVE-2023-16036.5 Medium
- devolutions serverImproper access control in the secure messages feature in Devolutions Server 2022.3.12 and below...CVE-2023-12016.5 Medium
- devolutions serverImproper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an...CVE-2023-09526.5 Medium
- devolutions serverImproper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could...CVE-2023-09518.8 High
- devolutions serverInsufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and...CVE-2023-09538.8 High
- devolutions serverImproper access control in Devolutions Server allows an authenticated user to access unauthorized...CVE-2023-06616.5 Medium
- devolutions serverGotify server XSS vulnerability in the application image file uploadCVE-2022-46181Fix available6.1 Medium
- devolutions server, go-vela ui, worker +2 moreVela Insecure DefaultsCVE-2022-39395Fix available9.6 Critical
- devolutions server, remote desktop manager +1 moreDashlane password and Keepass Server password in My Account Settings are not encrypted in the...CVE-2022-37816.5 Medium
- devolutions server, x.org x server +1 moreX.org Server xquartz X11Controller.m denial of serviceCVE-2022-3553Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leakCVE-2022-3551Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflowCVE-2022-3550Fix available5.5 Medium
- devolutions server, filezilla-project filezilla server +1 moreFileZilla Server PORT confused deputyCVE-2015-100034.3 Medium
- devolutions serverIncorrect permission management in Devolutions Server before 2022.2 allows a new user with a...CVE-2022-339968.8 High
- devolutions serverHTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows...CVE-2022-23165.4 Medium
- devolutions serverTrueConf Server cross-site request forgeryCVE-2017-201204.3 Medium
- devolutions serverTrueConf Server change-lang redirectCVE-2017-201193.5 Low
- devolutions serverTrueConf Server DOM cross site scriptingCVE-2017-201183.5 Low
- devolutions serverTrueConf Server group DOM cross site scriptingCVE-2017-201173.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201163.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201153.5 Low
- devolutions serverTrueConf Server Reflected cross site scriptingCVE-2017-201143.5 Low
- devolutions serverTrueConf Server Stored cross site scriptingCVE-2017-201133.5 Low
- devolutions serverDevolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept...CVE-2021-363822.6 Low
- devolutions serverAn SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020...CVE-2021-281577.2 High
- devolutions serverAn overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS...CVE-2021-280486.5 Medium
- go-vela vela, devolutions server +1 moreReject unauthorized access with GitHub PATsCVE-2021-21432Fix available7.5 High
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS...CVE-2021-239256.1 Medium
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive...CVE-2021-239247.5 High
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is broken access control on...CVE-2021-239219.1 Critical
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with...CVE-2021-239238.1 High
- devolutions server, kongchuanhujiao project kongchuanhujiao +1 moreAuthentication Bypass by Primary Weakness in github.com/kongchuanhujiao/serverCVE-2021-21403Fix available7.5 High