Remote Desktop Manager

Every one of the 51 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location.CVE-2022-33995Devolutions · 2.0% likely

   CWE-22

2. An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.CVE-2021-42098Devolutions · 1.9% likely

   CWE-276

3. Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authentica…CVE-2025-1636Devolutions · CVSS 6.5 · 1.8% likely

   CWE-200

4. Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data sourc…CVE-2025-1635Devolutions · CVSS 6.5 · 1.8% likely

   CWE-200

5. An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews.CVE-2021-23922Devolutions · 1.5% likely

   CWE-79

6. Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. Th…CVE-2022-2221Devolutions · 1.3% likely

   CWE-200

7. Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML v…CVE-2021-28047Devolutions · 1.3% likely

   CWE-79

8. Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application.CVE-2022-4287Devolutions · CVSS 8.8 · 1.1% likely
9. Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM ins…CVE-2024-6057Devolutions · CVSS 9.8 · 0.9% likely

   CWE-287

10. Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via t…CVE-2024-6354Devolutions · CVSS 7.2 · 0.8% likely

    CWE-1262

11. Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data s…CVE-2023-5765Devolutions · 0.7% likely
12. Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL…CVE-2023-6593Devolutions · 0.7% likely

    CWE-732

13. Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a c…CVE-2023-4373Devolutions · CVSS 9.8 · 0.7% likely

    CWE-287

14. A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another windows user session on t…CVE-2023-5766Devolutions · CVSS 8.8 · 0.7% likely
15. Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypa…CVE-2024-11670Devolutions · CVSS 5.4 · 0.7% likely

    CWE-863

16. Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. T…CVE-2022-3780Devolutions · CVSS 7.5 · 0.7% likely

    CWE-284

17. Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that r…CVE-2024-12149Devolutions · CVSS 8.1 · 0.6% likely

    CWE-732

18. Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.CVE-2022-3641Devolutions · CVSS 8.8 · 0.6% likely

    CWE-269

19. Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14.0 and earlier on Windows allows an attacker to intercept pr…CVE-2024-6492Devolutions · CVSS 7.4 · 0.6% likely

    CWE-522

20. Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthori…CVE-2025-5334Devolutions · CVSS 7.5 · 0.6% likely

    CWE-359

21. Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the…CVE-2024-11672Devolutions · CVSS 4.3 · 0.5% likely

    CWE-863

22. Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under spe…CVE-2023-4417Devolutions · 0.5% likely
23. Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devol…CVE-2022-3781Devolutions · CVSS 6.5 · 0.5% likely

    CWE-311

24. Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA val…CVE-2024-11671Devolutions · CVSS 5.4 · 0.5% likely

    CWE-287

25. Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user i…CVE-2023-1980Devolutions · CVSS 6.5 · 0.5% likely

    CWE-287

26. Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an authenticated attacker wit…CVE-2026-13372Devolutions · CVSS 7.2 · 0.5% likely

    CWE-706

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.