CVE Intelligence

Vulnerabilidades do Devolutions Devolutions Server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Devolutions Devolutions Server: 61 registro(s), com versões afetadas e correções.
cpe:2.3:a:devolutions:devolutions_server

CVE-2026-1007 Alta · 7.6 CWE-863 19/01/2026
Incorrect Authorization em Devolutions Devolutions Server
Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny IP rules.This issue affects Server: from 2025.3.1 through 2025.3.12.
CVE-2026-0610 Crítica · 9.8 CWE-89 19/01/2026
SQL Injection em Devolutions Devolutions Server
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12
CVE-2025-13683 Média · 6.5 CWE-200 28/11/2025
Exposure of Sensitive Information em Devolutions Devolutions Server
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.
CVE-2025-13765 Média · 4.3 CWE-200 27/11/2025
Exposure of Sensitive Information em Devolutions Devolutions Server
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
CVE-2025-13758 Baixa · 3.5 CWE-522 27/11/2025
Insufficiently Protected Credentials em Devolutions Devolutions Server
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.
CVE-2025-13757 Alta · 8.8 CWE-89 27/11/2025
SQL Injection em Devolutions Devolutions Server
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8.
CVE-2025-12808 Média · 6.5 CWE-284 06/11/2025
Improper Access Control em Devolutions Devolutions Server
Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier
CVE-2025-12485 Alta · 8.8 CWE-269 06/11/2025
Improper Privilege Management em Devolutions Devolutions Server
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie.This does not bypass the target account MFA verification step. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier
CVE-2025-11958 Média · 4.1 CWE-20 22/10/2025
Improper Input Validation em Devolutions Devolutions Server
An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.
CVE-2025-11957 Alta · 8.4 CWE-639 22/10/2025
Authorization Bypass Through User-Controlled Key (IDOR) em Devolutions Devolutions Server
Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.
CVE-2025-11619 Alta · 8.8 CWE-295 15/10/2025
Improper Certificate Validation em Devolutions Devolutions Server
Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers in MitM position to intercept traffic.