Approved changes feed: RSS · Atom

cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorDevolutions (7032325e-1090-5501-8038-d00cf17c6e3c)
ProductDevolutions Server (a3c351fd-a891-55cc-8eb1-d3e04c48cc07)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/devolutions/devolutions-server purl2cpe 2026-06-01 10:11:12.285814

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28157 vulnerable 2026-06-03 14:44:17.299147 Details available
An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.
Published: 2021-04-14T19:40:17.000Z
Updated: 2024-08-03T21:40:12.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28048 vulnerable 2026-06-03 14:44:17.184719 Details available
An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.
Published: 2021-04-14T19:37:02.000Z
Updated: 2024-08-03T21:33:17.305Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.