RD
Product
Remote Desktop Manager
54
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 29Low 3
Watch
Add Remote Desktop Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2600 | 6.8 | Mar 26 | Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use the ELEVATED_PASSWORD variable even though… Affected: before 2024.3.31.0; before 2024.3.31.0; 2025.1.24.0 before 2025.1.26.0; 2025.1.24.0 before 2025.1.26.0 |
| CVE-2025-13683 | 6.5 | Nov 28 | Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop… Affected: through 2025.3.23.0 |
| CVE-2025-1636 | 6.5 | Mar 13 | Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an… Affected: before 2024.3.31.0; before 2024.3.31.0 |
| CVE-2025-1635 | 6.5 | Mar 13 | Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data… Affected: before 2024.3.31.0; before 2024.3.31.0 |
| CVE-2023-4417 | 6.5 | Aug 21 | Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under… Affected: through 2023.2.19 |
| CVE-2023-2282 | 6.5 | Apr 25 | Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass… Affected: through 2023.1.22 |
| CVE-2023-1980 | 6.5 | Apr 11 | Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application… Affected: through 2022.3.35 |
| CVE-2023-1574 | 6.5 | Apr 2 | Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to… Affected: before 2023.1.10 |
| CVE-2023-1202 | 6.5 | Apr 2 | Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to… Affected: before 2023.1.10 |
| CVE-2023-1203 | 6.5 | Mar 10 | Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an… Affected: before 2022.3.1.6 |
| CVE-2022-3781 | 6.5 | Nov 1 | Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and… Affected: through 2022.2.26 |
| CVE-2022-2221 | 6.5 | Jun 27 | Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users Affected: before 2022.1.8 |
| CVE-2024-2403 | 5.9 | Mar 13 | Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Windows allows an attacker that compromised a user endpoint,… Affected: before 2024.1.15.0; before 2024.1.15.0 |
| CVE-2026-12162 | 5.5 | Jun 15 | Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a… Affected: 2026.2.0 through 2026.2.8 |
| CVE-2024-7421 | 5.5 | Sep 25 | An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials… Affected: before 2024.3.10 |
| CVE-2025-2562 | 5.4 | Mar 26 | Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a… Affected: before 2024.3.31.0; before 2024.3.31.0; 2025.1.24.0 before 2025.1.26.0; 2025.1.24.0 before 2025.1.26.0 |
| CVE-2025-2499 | 5.4 | Mar 26 | Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows Affected: before 2024.3.31.0; before 2024.3.31.0; 2025.1.24.0 before 2025.1.26.0; 2025.1.24.0 before 2025.1.26.0 |
| CVE-2024-11671 | 5.4 | Nov 25 | Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA… Affected: before 2024.3.18.0; before 2024.3.18.0 |
| CVE-2024-11670 | 5.4 | Nov 25 | Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to… Affected: through 2024.3.10.0; through 2024.3.10.0 |
| CVE-2024-0589 | 5.4 | Jan 31 | Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data… Affected: through 2023.3.36.0 |
| CVE-2021-23922 | 5.4 | Apr 1 | An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12 Affected: before 2020.2.12.0 |
| CVE-2021-28047 | 5.4 | Apr 1 | Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML… Affected: before 2021.1.0 |
| CVE-2024-6055 | 4.7 | Jun 17 | Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains… Affected: before 2024.2.8.0; before 2024.2.8.0 |
| CVE-2022-1342 | 4.6 | Jun 15 | A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data Affected: through 2022.1.24 |
| CVE-2023-7047 | 4.4 | Dec 21 | Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits… Affected: through 2023.3.31.0 |
| CVE-2026-78417 | 4.3 | Aug 24 | Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path… Affected: before 2026.2.18; before 2026.1.25 |
| CVE-2024-11672 | 4.3 | Nov 25 | Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the… Affected: before 2024.3.10.0; before 2024.3.10.0 |
| CVE-2024-3545 | 4.3 | Apr 9 | Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier… Affected: before 2024.1.21.0; before 2024.1.21.0 |
| CVE-2023-1939 | 4.3 | Apr 11 | No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and… Affected: through 2022.3.2.0; through 2022.3.33.0 |
Showing 29