Skip to contentDevolutions Server vulnerabilities
- devolutions server, remote desktop manager +1 moreExposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on...CVE-2025-136836.5 Medium
- devolutions serverExposure of credentials in unintended requests in Devolutions Server.This issue affects Server:...CVE-2025-137583.5 Low
- devolutions serverSQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects...CVE-2025-137578.8 High
- devolutions serverExposure of email service credentials to users without administrative rights in Devolutions...CVE-2025-137654.3 Medium
- devolutions serverImproper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and...CVE-2025-124858.8 High
- devolutions serverImproper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user to...CVE-2025-128086.5 Medium
- devolutions serverImproper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and...CVE-2025-119579.0 Critical
- devolutions serverAn improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server...CVE-2025-119585.1 Medium
- devolutions server, mongodb +1 moreUse-after-free in the MongoDB server query planner may lead to crash or undefined behaviorCVE-2025-11979Fix available5.3 Medium
- devolutions serverImproper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and...CVE-2025-116198.8 High
- devolutions serverKaillera 0.86 Server DoS via Malformed UDP PacketCVE-2011-100208.7 High
- actfax serverActFax 4.32 Client Importer Buffer OverflowCVE-2012-10043Public exploit9.3 Critical
- devolutions serverDeadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain...CVE-2025-83127.1 High
- devolutions serverUI synchronization issue in the Just-in-Time (JIT) access request approval interface in...CVE-2025-83535.9 Medium
- devolutions serverImproper access control in secure message component in Devolutions Server allows an authenticated...CVE-2025-67417.1 High
- devolutions serverUse of weak credentials in emergency authentication component in Devolutions Server allows an...CVE-2025-65239.5 Critical
- coloradoftp serverColoradoFTP Server <= 1.3 Build 8 Path Traversal Information DisclosureCVE-2025-341109.3 Critical
- devolutions serverImproper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier...CVE-2025-06915.0 Medium
- devolutions serverImproper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows...CVE-2025-53826.8 Medium
- devolutions serverImproper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and...CVE-2025-37685.0 Medium
- devolutions serverImproper access control in user group management in Devolutions Server 2025.1.7.0 and earlier...CVE-2025-44338.7 High
- devolutions serverImproper privilege assignment in PAM JIT privilege sets in Devolutions
Server allows a PAM user...CVE-2025-44936.5 Medium
- devolutions serverImproper access control in PAM feature in Devolutions Server 2025.1.6.0 and earlier allows a PAM...CVE-2025-43164.3 Medium
- devolutions serverIncorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and...CVE-2025-35176.3 Medium
- devolutions serverImproper access control in web extension restriction feature in Devolutions Server 2024.3.13 and...CVE-2025-22808.1 High
- devolutions serverImproper access control in temporary access requests and checkout requests endpoints in...CVE-2025-22786.5 Medium
- devolutions serverExposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13...CVE-2025-22777.5 High
- devolutions serverVela Server has Insufficient Webhook Payload Data VerificationCVE-2025-27616Fix available8.6 High
- devolutions serverIncorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an...CVE-2025-20037.1 High
- devolutions serverImproper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an...CVE-2025-12315.4 Medium
- devolutions serverIncorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and...CVE-2024-121484.3 Medium
- devolutions serverIncorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0...CVE-2024-121515.0 Medium
- devolutions serverIncorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier...CVE-2024-121966.5 Medium
- devolutions server, dvls (devolutions server) +1 moreImproper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier...CVE-2024-109714.3 Medium
- devolutions serverAuthorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10...CVE-2024-65126.5 Medium
- devolutions serverAuthentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an...CVE-2024-48466.3 Medium
- devolutions serverImproper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and...CVE-2024-50726.5 Medium
- devolutions server, remote desktop manager +1 moreImproper permission handling in the vault offline cache feature in Devolutions Remote Desktop...CVE-2024-35454.3 Medium
- devolutions serverImproper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier...CVE-2024-29183.6 Low
- devolutions serverImproper access control in PAM vault permissions in Devolutions Server 2024.1.6 and earlier...CVE-2024-29219.8 Critical
- devolutions serverImproper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an...CVE-2024-29158.8 High
- devolutions serverGacjie Server Upload.php index unrestricted uploadCVE-2024-24065.4 Medium
- devolutions serverImproper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3...CVE-2024-17647.6 High
- devolutions serverImproper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier...CVE-2024-18984.3 Medium
- devolutions serverImproper session management in the identity provider authentication flow in Devolutions Server...CVE-2024-19005.5 Medium
- devolutions serverDenial of service in PAM password rotation during the check-in process in Devolutions Server 2023...CVE-2024-19014.3 Medium
- devolutions serverInformation leak in Content-Security-Policy header in Devolutions Server 2023.3.7.0 allows an...CVE-2023-62645.3 Medium
- devolutions serverImproper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and...CVE-2023-53585.3 Medium
- devolutions serverImproper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and...CVE-2023-55756.5 Medium
- devolutions serverImproper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier...CVE-2023-52407.5 High
- Show moreLoading…