2022.3.7.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-10	CVE-2023-1201	Unspecified vulnerability in Devolutions Server Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains. network low complexity devolutions	6.5
2023-03-01	CVE-2023-0951	Unspecified vulnerability in Devolutions Server Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perform privileged actions. network low complexity devolutions	8.8
2023-03-01	CVE-2023-0952	Incorrect Authorization vulnerability in Devolutions Server Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to access sensitive data without proper authorization. network low complexity devolutions CWE-863	6.5
2023-03-01	CVE-2023-0953	SQL Injection vulnerability in Devolutions Server Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially resulting in unauthorized access to system resources. network low complexity devolutions CWE-89	8.8
2023-02-12	CVE-2023-0661	Unspecified vulnerability in Devolutions Server Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data. network low complexity devolutions	6.5