CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-12485

Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie.This does not bypass the target account MFA verification step. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.4%

CVSS Severity

CVSS v3 Score 8.8

References

https://devolutions.net/security/advisories/DEVO-2025-0016

Products affected by CVE-2025-12485

Devolutions » Devolutions Server » Version: N/A

cpe:2.3:a:devolutions:devolutions_server:-
Devolutions » Devolutions Server » Version: 2019.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.10.0
Devolutions » Devolutions Server » Version: 2019.1.11.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.11.0
Devolutions » Devolutions Server » Version: 2019.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.12.0
Devolutions » Devolutions Server » Version: 2019.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.13.0
Devolutions » Devolutions Server » Version: 2019.1.14.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.14.0
Devolutions » Devolutions Server » Version: 2019.1.15.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.15.0
Devolutions » Devolutions Server » Version: 2019.1.16.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.16.0
Devolutions » Devolutions Server » Version: 2019.1.17.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.17.0
Devolutions » Devolutions Server » Version: 2019.1.18.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.18.0
Devolutions » Devolutions Server » Version: 2019.1.19.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.19.0
Devolutions » Devolutions Server » Version: 2019.1.20.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.20.0
Devolutions » Devolutions Server » Version: 2019.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.8.0
Devolutions » Devolutions Server » Version: 2019.1.9.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.9.0
Devolutions » Devolutions Server » Version: 2019.2.12.0

cpe:2.3:a:devolutions:devolutions_server:2019.2.12.0
Devolutions » Devolutions Server » Version: 2020.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.10.0
Devolutions » Devolutions Server » Version: 2020.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.12.0
Devolutions » Devolutions Server » Version: 2020.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.13.0
Devolutions » Devolutions Server » Version: 2020.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.3.0
Devolutions » Devolutions Server » Version: 2020.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.7.0
Devolutions » Devolutions Server » Version: 2020.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.10.0
Devolutions » Devolutions Server » Version: 2020.2.7.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.7.0
Devolutions » Devolutions Server » Version: 2020.2.8.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.8.0
Devolutions » Devolutions Server » Version: 2020.2.9.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.9.0
Devolutions » Devolutions Server » Version: 2020.3

cpe:2.3:a:devolutions:devolutions_server:2020.3
Devolutions » Devolutions Server » Version: 2020.3.11.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.11.0
Devolutions » Devolutions Server » Version: 2020.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.12.0
Devolutions » Devolutions Server » Version: 2020.3.14.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.14.0
Devolutions » Devolutions Server » Version: 2020.3.17.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.17.0
Devolutions » Devolutions Server » Version: 2020.3.18

cpe:2.3:a:devolutions:devolutions_server:2020.3.18
Devolutions » Devolutions Server » Version: 2020.3.20

cpe:2.3:a:devolutions:devolutions_server:2020.3.20
Devolutions » Devolutions Server » Version: 2020.3.21

cpe:2.3:a:devolutions:devolutions_server:2020.3.21
Devolutions » Devolutions Server » Version: 2020.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.8.0
Devolutions » Devolutions Server » Version: 2021.1

cpe:2.3:a:devolutions:devolutions_server:2021.1
Devolutions » Devolutions Server » Version: 2021.1.17

cpe:2.3:a:devolutions:devolutions_server:2021.1.17
Devolutions » Devolutions Server » Version: 2021.1.18

cpe:2.3:a:devolutions:devolutions_server:2021.1.18
Devolutions » Devolutions Server » Version: 2021.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2021.1.7.0
Devolutions » Devolutions Server » Version: 2022.1.0

cpe:2.3:a:devolutions:devolutions_server:2022.1.0
Devolutions » Devolutions Server » Version: 2022.2.0

cpe:2.3:a:devolutions:devolutions_server:2022.2.0
Devolutions » Devolutions Server » Version: 2022.3.10.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.10.0
Devolutions » Devolutions Server » Version: 2022.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.12.0
Devolutions » Devolutions Server » Version: 2022.3.13.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.13.0
Devolutions » Devolutions Server » Version: 2022.3.2

cpe:2.3:a:devolutions:devolutions_server:2022.3.2
Devolutions » Devolutions Server » Version: 2022.3.3.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.3.0
Devolutions » Devolutions Server » Version: 2022.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.4.0
Devolutions » Devolutions Server » Version: 2022.3.5.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.5.0
Devolutions » Devolutions Server » Version: 2022.3.6.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.6.0
Devolutions » Devolutions Server » Version: 2022.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.7.0
Devolutions » Devolutions Server » Version: 2022.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.8.0
Devolutions » Devolutions Server » Version: 2022.3.9.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.9.0
Devolutions » Devolutions Server » Version: 2023.1.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.0
Devolutions » Devolutions Server » Version: 2023.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.3.0
Devolutions » Devolutions Server » Version: 2023.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.4.0
Devolutions » Devolutions Server » Version: 2023.1.5.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.5.0
Devolutions » Devolutions Server » Version: 2023.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.6.0
Devolutions » Devolutions Server » Version: 2023.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.7.0
Devolutions » Devolutions Server » Version: 2023.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.8.0
Devolutions » Devolutions Server » Version: 2023.2

cpe:2.3:a:devolutions:devolutions_server:2023.2
Devolutions » Devolutions Server » Version: 2023.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2023.2.10.0
Devolutions » Devolutions Server » Version: 2023.3.14.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.14.0
Devolutions » Devolutions Server » Version: 2023.3.16.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.16.0
Devolutions » Devolutions Server » Version: 2023.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.4.0
Devolutions » Devolutions Server » Version: 2023.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.7.0
Devolutions » Devolutions Server » Version: 2023.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.8.0
Devolutions » Devolutions Server » Version: 2024.1.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.0
Devolutions » Devolutions Server » Version: 2024.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.10.0
Devolutions » Devolutions Server » Version: 2024.1.11.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.11.0
Devolutions » Devolutions Server » Version: 2024.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.12.0
Devolutions » Devolutions Server » Version: 2024.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.13.0
Devolutions » Devolutions Server » Version: 2024.1.14.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.14.0
Devolutions » Devolutions Server » Version: 2024.1.15.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.15.0
Devolutions » Devolutions Server » Version: 2024.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.4.0
Devolutions » Devolutions Server » Version: 2024.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.6.0
Devolutions » Devolutions Server » Version: 2024.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.8.0
Devolutions » Devolutions Server » Version: 2024.1.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.9.0
Devolutions » Devolutions Server » Version: 2024.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.10.0
Devolutions » Devolutions Server » Version: 2024.2.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.12.0
Devolutions » Devolutions Server » Version: 2024.2.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.13.0
Devolutions » Devolutions Server » Version: 2024.2.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.3.0
Devolutions » Devolutions Server » Version: 2024.2.5.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.5.0
Devolutions » Devolutions Server » Version: 2024.2.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.6.0
Devolutions » Devolutions Server » Version: 2024.2.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.8.0
Devolutions » Devolutions Server » Version: 2024.2.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.9.0
Devolutions » Devolutions Server » Version: 2024.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.0
Devolutions » Devolutions Server » Version: 2024.3.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.10.0
Devolutions » Devolutions Server » Version: 2024.3.11.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.11.0
Devolutions » Devolutions Server » Version: 2024.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.12.0
Devolutions » Devolutions Server » Version: 2024.3.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.13.0
Devolutions » Devolutions Server » Version: 2024.3.14.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.14.0
Devolutions » Devolutions Server » Version: 2024.3.15.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.15.0
Devolutions » Devolutions Server » Version: 2024.3.16.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.16.0
Devolutions » Devolutions Server » Version: 2024.3.17.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.17.0
Devolutions » Devolutions Server » Version: 2024.3.2.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.2.0
Devolutions » Devolutions Server » Version: 2024.3.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.3.0
Devolutions » Devolutions Server » Version: 2024.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.4.0
Devolutions » Devolutions Server » Version: 2024.3.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.6.0
Devolutions » Devolutions Server » Version: 2024.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.7.0
Devolutions » Devolutions Server » Version: 2024.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.8.0
Devolutions » Devolutions Server » Version: 2024.3.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.9.0
Devolutions » Devolutions Server » Version: 2025.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.10.0
Devolutions » Devolutions Server » Version: 2025.1.11.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.11.0
Devolutions » Devolutions Server » Version: 2025.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.3.0
Devolutions » Devolutions Server » Version: 2025.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.4.0
Devolutions » Devolutions Server » Version: 2025.1.5.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.5.0
Devolutions » Devolutions Server » Version: 2025.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.6.0
Devolutions » Devolutions Server » Version: 2025.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.7.0
Devolutions » Devolutions Server » Version: 2025.1.9.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.9.0
Devolutions » Devolutions Server » Version: 2025.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.10.0
Devolutions » Devolutions Server » Version: 2025.2.12.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.12.0
Devolutions » Devolutions Server » Version: 2025.2.14.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.14.0
Devolutions » Devolutions Server » Version: 2025.2.15.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.15.0
Devolutions » Devolutions Server » Version: 2025.2.2.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.2.0
Devolutions » Devolutions Server » Version: 2025.2.3.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.3.0
Devolutions » Devolutions Server » Version: 2025.2.4.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.4.0
Devolutions » Devolutions Server » Version: 2025.2.5.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.5.0
Devolutions » Devolutions Server » Version: 2025.2.7.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.7.0
Devolutions » Devolutions Server » Version: 2025.2.8.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.8.0
Devolutions » Devolutions Server » Version: 2025.2.9.0

cpe:2.3:a:devolutions:devolutions_server:2025.2.9.0
Devolutions » Devolutions Server » Version: 2025.3.2.0

cpe:2.3:a:devolutions:devolutions_server:2025.3.2.0
Devolutions » Devolutions Server » Version: 2025.3.3.0

cpe:2.3:a:devolutions:devolutions_server:2025.3.3.0
Devolutions » Devolutions Server » Version: 2025.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2025.3.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-12485

Products

Pricing

Contact Us