Security & compliance

Upholding the highest standards to protect your data and ensure trust.

DEVO-2024-0001

Remote Desktop Manager Windows is affected by a vulnerability.

Affected Products

Remote Desktop Manager
Windows 2023.3.36.0 and earlier.

Change Log

2024-01-31 - Initial Publication

4.8 Medium - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/U:Green

Cross-site scripting (XSS) vulnerability in the entry overview tab

Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.

Affected Products

CVE(s)

CVE-2024-0589

Remediation and Workarounds

Upgrade to Remote Desktop Manager 2023.3.37.0 or higher

Devolutions Logo

Helping organizations control the IT chaos by providing highly-secure password, remote connection and privileged access management solutions.

DEVOLUTIONS

Legal & privacy | infos@devolutions.net

All rights reserved © 2025 Devolutions