No weakness recorded

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application.CVE-2022-4287Devolutions · CVSS 8.8 · 1.1% likely
2. An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements.CVE-2021-23921Devolutions · 1.0% likely
3. Improper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could allow a standard privileged user to perform privileged actions.CVE-2023-0951Devolutions · CVSS 8.8 · 1.0% likely
4. Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the dat…CVE-2023-1201Devolutions · 0.8% likely
5. Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via…CVE-2023-5575Devolutions · 0.8% likely
6. Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data s…CVE-2023-5765Devolutions · 0.7% likely
7. A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another windows user session on t…CVE-2023-5766Devolutions · CVSS 8.8 · 0.7% likely
8. Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to m…CVE-2024-5072Devolutions · CVSS 6.5 · 0.7% likely
9. Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed t…CVE-2023-5358Devolutions · 0.7% likely
10. Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 and earlier. This allows an attacker with ac…CVE-2023-6588Devolutions · 0.6% likely
11. Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under spe…CVE-2023-4417Devolutions · 0.5% likely
12. Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enfor…CVE-2023-2282Devolutions · CVSS 3.1 · 0.4% likely
13. Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissionsCVE-2024-2241Devolutions · CVSS 6.3 · 0.4% likely
14. Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic f…CVE-2023-2118Devolutions · CVSS 4.3 · 0.4% likely
15. Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM cre…CVE-2024-1901Devolutions · CVSS 4.3 · 0.3% likely
16. The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make f…CVE-2022-23849Devolutions · 0.3% likely
17. Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to forge the disp…CVE-2024-2918Devolutions · CVSS 3.6 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.