Vulnerabilities > Devolutions > Devolutions Server > 2022.3.3.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-03-01 | CVE-2023-0953 | SQL Injection vulnerability in Devolutions Server Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources. | 8.8 |
2023-02-12 | CVE-2023-0661 | Unspecified vulnerability in Devolutions Server Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data. | 6.5 |