Vulnerabilities > Devolutions
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-18 | CVE-2021-42098 | Incorrect Default Permissions vulnerability in Devolutions Remote Desktop Manager An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell. | 6.5 |
| 2021-07-12 | CVE-2021-36382 | Insufficiently Protected Credentials vulnerability in Devolutions Server Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext). | 4.3 |
| 2021-04-01 | CVE-2021-23925 | Cross-site Scripting vulnerability in Devolutions Server An issue was discovered in Devolutions Server before 2020.3. | 4.3 |
| 2021-04-01 | CVE-2021-23924 | Information Exposure Through Log Files vulnerability in Devolutions Server An issue was discovered in Devolutions Server before 2020.3. | 5.0 |
| 2021-04-01 | CVE-2021-23923 | Improper Authentication vulnerability in Devolutions Server An issue was discovered in Devolutions Server before 2020.3. | 4.9 |
| 2021-04-01 | CVE-2021-23922 | Cross-site Scripting vulnerability in Devolutions Remote Desktop Manager An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. | 3.5 |
| 2021-04-01 | CVE-2021-23921 | Unspecified vulnerability in Devolutions Server An issue was discovered in Devolutions Server before 2020.3. | 6.4 |
| 2021-04-01 | CVE-2021-28047 | Cross-site Scripting vulnerability in Devolutions Remote Desktop Manager Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields. | 3.5 |
| 2021-01-26 | CVE-2020-36211 | Unspecified vulnerability in Devolutions Gfwx 0.1.0/0.2.0 An issue was discovered in the gfwx crate before 0.3.0 for Rust. local devolutions | 4.4 |