Devolutions · weakness class

SQL Injection

3 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

Insufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and earlier allows an authenticated attacker to perform an SQL Injection, potentially…CVE-2023-0953Devolutions · CVSS 8.8 · 1.0% likely
CWE-89
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8.CVE-2025-13757Devolutions · CVSS 8.8 · 0.6% likely
CWE-89
SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12CVE-2026-0610Devolutions · CVSS 9.8 · 0.3% likely
CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.