Devolutions

Records213All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high63CVSS 7.0–8.9

Exploited now

Devolutions records in CISA KEV

No Devolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Devolutions Server 116 records MEDIUM Remote Desktop Manager 53 records MEDIUM Powershell Universal 6 records MEDIUM Workspace 3 records LOW Devolutions Gateway 1 record MEDIUM Gfwx 1 record LOW Hub Reporting Service 1 record LOW Password Hub 1 record LOW

Records

3 records in Workspace · all components

TI-2023-02116 CVE-2023-2257 · GHSA-2rx2-wvh6-wg6m

Incorrect authorization in Devolutions Workspace Desktop

LOW 33

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Business space without b…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00179 Published 2023-04-24 No fix listed CWE-863

TI-2023-06037 CVE-2023-6588 · GHSA-3mp7-3wf9-mp89

Offline mode is always enabled, even if permission disallows it, in Devolutions Server…

LOW 30

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00589 Published 2023-12-07 No fix listed

TI-2024-02080 CVE-2024-2241 · GHSA-4pmx-grr5-rmvm

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and…

LOW 28

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00401 Published 2024-03-07 No fix listed

Open these records in search →

Critical	14
High	63
Medium	122
Low	14
No CVSS	0