Remote connection & IT management

Boost productivity, decrease costs, and increase security with a centralized platform where you can manage a wide range of remote connections and tools.

Workforce password management

Improve your security strategy without reducing productivity by using a password management solution.

Privileged access management

Diminish the risk of insider threats and cyberattacks while providing audit and compliance requirements for your team.

Remote access management

Establish a secure entry point for internal or external segmented networks that require authorized just-in-time (JIT) access.

Solutions

All-in-one IT security toolbox for small teams.

Explore all solution packages

Remote Desktop Manager & CyberArk

Integration center

Unified solutions: seamless integrations with Devolutions

Products

The best remote connection manager in the industry

Cloud-hosted password manager built for IT professionals

Self-hosted credential manager built for IT professionals

Privileged access manager built for IT professionals

Secure remote access management — no VPN required

We believe in making powerful tools accessible to everyone

Companion Tools

Mobile, desktop application & browser extension

Remote connection launching tool

Cmdlets that interact with Devolutions products

Secrets sharing made quick, secure, and simple

System service to control privileged operations

Resources

Devolutions
Academy

Your FREE go-to hub for mastering Devolutions' suite of products and services.

Devolutions
forum

The Devolutions Forum is the place to go to connect with your peers and the Devolutions team.

Devolutions
documentation

Get answers to product specifications, settings and more on our documentation.

Devolutions
blog

Stay up to date with our weekly articles on our blog, the toolbox for your IT success.

Use cases Success stories Reports & white papers Glossary (IT and security)

Contact

Technical support Sales Contact information

Security & Compliance

Advisories Reporting a Security issue Trust Center

DEVO-2021-0001

Summary

A Cross-Site Scripting (XSS) vulnerability was fixed in Remote Desktop Manager.

Affected Products

Remote Desktop Manager 2020.2 and earlier

Change Log

Initial publication - 2021-03-30

Severity

Medium

Products

Remote Desktop Manager

Fix Version

2020.3

Cross-site scripting (XSS) vulnerability in webviews (CVE-2021-23922)

Description

A cross-site scripting (XSS) vulnerability in the application could allow an actor to inject malicious javascript code in some form fields that are rendered by webviews.

Remediation and Workarounds

Install Remote Desktop Manager 2020.3 or more recent.

Severity

Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected Products

Remote Desktop Manager 2020.2 and earlier

CVE(s)

CVE-2021-23922