CVE-2023-2400

2.7 lowEPSS 0.4%

Low (2.7) in devolutions devolutions server. EPSS 0.4% chance of exploitation in the next 30 days.

Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-459
Published: 2023-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:devolutions_server

References

https://devolutions.net/security/advisories/DEVO-2023-0014
https://devolutions.net/security/advisories/DEVO-2023-0014

Check your stack JSON