Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
devolutions remote desktop manager vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2021-42098
An incomplete permission check on entries in Devolutions Remote Desktop Manager prior to 2021.2.16 allows malicious users to bypass permissions via batch custom PowerShell.
Devolutions Remote Desktop Manager
5
CVSSv2
CVE-2022-33995
A path traversal issue in entry attachments in Devolutions Remote Desktop Manager prior to 2022.2 allows malicious users to create or overwrite files in an arbitrary location.
Devolutions Remote Desktop Manager
4
CVSSv2
CVE-2022-2221
Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager prior to 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.
Devolutions Remote Desktop Manager
3.5
CVSSv2
CVE-2021-23922
An issue exists in Devolutions Remote Desktop Manager prior to 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews.
Devolutions Remote Desktop Manager
3.5
CVSSv2
CVE-2021-28047
Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager prior to 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields.
Devolutions Remote Desktop Manager
2.1
CVSSv2
CVE-2022-1342
A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate malicious users to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disc...
Devolutions Remote Desktop Manager
NA
CVE-2024-3545
Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and previous versions on windows and Devolutions Server 2024.1.8 and previous versions allows an malicious user to access sensitive informations contained in the offlin...
NA
CVE-2024-2403
Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and previous versions on Windows allows an attacker that compromised a user endpoint, under specific circumstances, to access sensitive information via residual files in the tem...
NA
CVE-2024-0589
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and previous versions on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.
Devolutions Remote Desktop Manager
NA
CVE-2023-7047
Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This af...
Devolutions Remote Desktop Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065
open redirect
CVE-2024-1086
path traversal
CVE-2024-29825
XXE
CVE-2024-29822
CVE-2024-20696
CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »