devolutions kayıtları

devolutions üreticisine ait 177 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %1,1
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

177 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2024-6057İstismar yok	Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that devolutions · remote desktop manager · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,9	17 Haz 2024
39İzleyin	CVE-2024-2921İstismar yok	Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to tdevolutions · devolutions server · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,8	26 Mar 2024
39İzleyin	CVE-2023-6593İstismar yok	Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to thdevolutions · remote desktop manager · CWE-732 Kimlik doğrulamasız	Kritik9,8	—	%0,7	12 Ara 2023
39İzleyin	CVE-2023-4373İstismar yok	Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 andevolutions · remote desktop manager · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,7	21 Ağu 2023
39İzleyin	CVE-2026-3224İstismar yok	Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unautdevolutions · devolutions server · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	3 Mar 2026
39İzleyin	CVE-2026-3204İstismar yok	Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displadevolutions · devolutions server · CWE-20 Kimlik doğrulamasız	Kritik9,8	—	%0,6	3 Mar 2026
39İzleyin	CVE-2023-5765İstismar yok	Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an atdevolutions · remote desktop manager Kimlik doğrulamasız	Kritik9,8	—	%0,6	1 Kas 2023
39İzleyin	CVE-2023-5766İstismar yok	A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute codevolutions · remote desktop manager pre-auth RCE	Kritik9,8	—	%0,6	1 Kas 2023
39İzleyin	CVE-2026-3130İstismar yok	Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete perdevolutions · devolutions server · CWE-841 Kimlik doğrulamasız	Kritik9,8	—	%0,5	3 Mar 2026
39İzleyin	CVE-2026-2590İstismar yok	Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manadevolutions · remote desktop manager · CWE-20 Kimlik doğrulamasız	Kritik9,8	—	%0,5	3 Mar 2026
39İzleyin	CVE-2026-0610İstismar yok	SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12devolutions · devolutions server · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,3	19 Oca 2026
38İzleyin	CVE-2025-6523İstismar yok	Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authenticatdevolutions · devolutions server · CWE-1391 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,5	—	%0,4	22 Tem 2025
36İzleyin	CVE-2021-42098İstismar yok	An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via devolutions · remote desktop manager · CWE-276	Yüksek8,8	—	%1,8	18 Eki 2021
36İzleyin	CVE-2021-23921İstismar yok	An issue was discovered in Devolutions Server before 2020.3.devolutions · devolutions server Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%1,0	1 Nis 2021
36İzleyin	CVE-2025-11957İstismar yok	Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to devolutions · devolutions server · CWE-639 Erişim denetimi (IDOR)	Kritik9,0	—	%0,3	22 Eki 2025
35İzleyin	CVE-2022-33996İstismar yok	Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissionsdevolutions · devolutions server · CWE-276	Yüksek8,8	—	%1,1	7 Tem 2022
35İzleyin	CVE-2023-0953İstismar yok	Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker todevolutions · devolutions server · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%1,0	1 Mar 2023
35İzleyin	CVE-2022-4287İstismar yok	Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicdevolutions · remote desktop manager Kimlik doğrulama atlatma	Yüksek8,8	—	%1,0	21 Ara 2022
35İzleyin	CVE-2023-0951İstismar yok	Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perfordevolutions · devolutions server	Yüksek8,8	—	%1,0	1 Mar 2023
35İzleyin	CVE-2024-2915İstismar yok	Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevatdevolutions · devolutions server · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,6	26 Mar 2024
35İzleyin	CVE-2025-12485İstismar yok	Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonatedevolutions · devolutions server · CWE-269	Yüksek8,8	—	%0,6	6 Kas 2025
35İzleyin	CVE-2025-13757İstismar yok	SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.devolutions · devolutions server · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	27 Kas 2025
35İzleyin	CVE-2022-3641İstismar yok	Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated usedevolutions · remote desktop manager · CWE-269	Yüksek8,8	—	%0,6	12 Ara 2022
35İzleyin	CVE-2026-16801İstismar yok	Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier devolutions · powershell universal · CWE-94 RCE	Yüksek8,8	—	%0,5	24 Tem 2026
35İzleyin	CVE-2026-16800İstismar yok	Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier adevolutions · powershell universal · CWE-94 RCE	Yüksek8,8	—	%0,5	24 Tem 2026

CVE-2024-6057
39İzleyin
Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
devolutions · remote desktop manager17 Haz 2024
CVE-2024-2921
39İzleyin
Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated user with access to t
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
devolutions · devolutions server26 Mar 2024
CVE-2023-6593
39İzleyin
Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to th
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
devolutions · remote desktop manager12 Ara 2023
CVE-2023-4373
39İzleyin
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 an
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
devolutions · remote desktop manager21 Ağu 2023
CVE-2026-3224
39İzleyin
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unaut
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
devolutions · devolutions server3 Mar 2026
CVE-2026-3204
39İzleyin
Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displa
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
devolutions · devolutions server3 Mar 2026
CVE-2023-5765
39İzleyin
Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an at
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
devolutions · remote desktop manager1 Kas 2023
CVE-2023-5766
39İzleyin
A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute co
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
devolutions · remote desktop manager1 Kas 2023
CVE-2026-3130
39İzleyin
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete per
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
devolutions · devolutions server3 Mar 2026
CVE-2026-2590
39İzleyin
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Mana
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
devolutions · remote desktop manager3 Mar 2026
CVE-2026-0610
39İzleyin
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
devolutions · devolutions server19 Oca 2026
CVE-2025-6523
38İzleyin
Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authenticat
KritikCVSS 9,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
devolutions · devolutions server22 Tem 2025
CVE-2021-42098
36İzleyin
An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via
YüksekCVSS 8,8İstismar yokEPSS %2
devolutions · remote desktop manager18 Eki 2021
CVE-2021-23921
36İzleyin
An issue was discovered in Devolutions Server before 2020.3.
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
devolutions · devolutions server1 Nis 2021
CVE-2025-11957
36İzleyin
Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to
KritikCVSS 9,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
devolutions · devolutions server22 Eki 2025
CVE-2022-33996
35İzleyin
Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions
YüksekCVSS 8,8İstismar yokEPSS %1
devolutions · devolutions server7 Tem 2022
CVE-2023-0953
35İzleyin
Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
devolutions · devolutions server1 Mar 2023
CVE-2022-4287
35İzleyin
Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malic
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulama atlatma
devolutions · remote desktop manager21 Ara 2022
CVE-2023-0951
35İzleyin
Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perfor
YüksekCVSS 8,8İstismar yokEPSS %1
devolutions · devolutions server1 Mar 2023
CVE-2024-2915
35İzleyin
Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevat
YüksekCVSS 8,8İstismar yokEPSS %1
- Erişim denetimi (IDOR)
devolutions · devolutions server26 Mar 2024
CVE-2025-12485
35İzleyin
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonate
YüksekCVSS 8,8İstismar yokEPSS %1
devolutions · devolutions server6 Kas 2025
CVE-2025-13757
35İzleyin
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
devolutions · devolutions server27 Kas 2025
CVE-2022-3641
35İzleyin
Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated use
YüksekCVSS 8,8İstismar yokEPSS %1
devolutions · remote desktop manager12 Ara 2022
CVE-2026-16801
35İzleyin
Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
devolutions · powershell universal24 Tem 2026
CVE-2026-16800
35İzleyin
Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier a
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
devolutions · powershell universal24 Tem 2026