CVE-2021-23925: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting XSS vulnerability in entries of type Document...

Devolutions Server cross-site scripting vulnerabilities

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. A cross-site scripting vulnerability exists in Devolutions Server versions prior to 2020.3 in entries of type "Document", which can be exploited by an...

Devolutions Server log information leakage vulnerability

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. An information disclosure vulnerability exists in Devolutions Server versions prior to 2020.3, which can be exploited by an attacker to obtain sensitive...

PT-2021-17728

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2021.1 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields in Administrative Reports, potentially leading to Cross-Site...

PT-2021-15609

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2020.2.12 Description: A cross-site scripting XSS issue was found in webviews, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to...

Devolutions Server Authorization Issue Vulnerability

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. An authorization issue vulnerability exists in Devolutions Server versions prior to 2020.3 that stems from an authentication outage for Windows domain users. ...

Devolutions Server security vulnerabilities

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server before 2020.3, which stems from a breach of access control on the password list entry element...

Devolutions Remote Desktop Manager Cross-site Scripting Vulnerability

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

CVE-2021-23923: Improper Authentication

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-23921: Undefined Security Weakness

An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements...

PT-2021-15611

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that exposes sensitive information in diagnostic files. Recommendations: For versions prior to 2020.3, update to version 2020.3 or later to resolve the issue...

PT-2021-15610

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered that affects the authentication process for Windows domain users, specifically due to broken authentication. Recommendations: For versions prior to 2020.3, updat...

PT-2021-15612

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: A cross-site scripting XSS issue was found in entries of type Document, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to 2020.3,...

PT-2021-15608

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered in Devolutions Server. There is broken access control on Password List entry elements. Recommendations: For versions prior to 2020.3, update to version 2020.3 or...

Devolutions Remote Desktop Manager Cross-site Scripting Vulnerability

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

CVE-2021-23924: Insertion of Sensitive Information into Log File

An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files...

CVE-2021-28047: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-23922: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...