Vulnerabilities > Devolutions > Remote Desktop Manager > 2022.2.16.0

DATE CVE VULNERABILITY TITLE RISK
2024-01-31 CVE-2024-0589 Cross-site Scripting vulnerability in Devolutions Remote Desktop Manager
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.
network
low complexity
devolutions CWE-79
5.4
2023-12-21 CVE-2023-7047 Unspecified vulnerability in Devolutions Remote Desktop Manager
Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.
local
low complexity
devolutions
4.4