CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-4433

Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group Management" permissions to perform privilege escalation by adding users to groups with administrative privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 12.8%

CVSS Severity

CVSS v3 Score 8.8

References

https://devolutions.net/security/advisories/DEVO-2025-0010/

Products affected by CVE-2025-4433

Devolutions » Devolutions Server » Version: N/A

cpe:2.3:a:devolutions:devolutions_server:-
Devolutions » Devolutions Server » Version: 2019.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.10.0
Devolutions » Devolutions Server » Version: 2019.1.11.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.11.0
Devolutions » Devolutions Server » Version: 2019.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.12.0
Devolutions » Devolutions Server » Version: 2019.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.13.0
Devolutions » Devolutions Server » Version: 2019.1.14.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.14.0
Devolutions » Devolutions Server » Version: 2019.1.15.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.15.0
Devolutions » Devolutions Server » Version: 2019.1.16.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.16.0
Devolutions » Devolutions Server » Version: 2019.1.17.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.17.0
Devolutions » Devolutions Server » Version: 2019.1.18.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.18.0
Devolutions » Devolutions Server » Version: 2019.1.19.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.19.0
Devolutions » Devolutions Server » Version: 2019.1.20.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.20.0
Devolutions » Devolutions Server » Version: 2019.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.8.0
Devolutions » Devolutions Server » Version: 2019.1.9.0

cpe:2.3:a:devolutions:devolutions_server:2019.1.9.0
Devolutions » Devolutions Server » Version: 2019.2.12.0

cpe:2.3:a:devolutions:devolutions_server:2019.2.12.0
Devolutions » Devolutions Server » Version: 2020.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.10.0
Devolutions » Devolutions Server » Version: 2020.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.12.0
Devolutions » Devolutions Server » Version: 2020.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.13.0
Devolutions » Devolutions Server » Version: 2020.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.3.0
Devolutions » Devolutions Server » Version: 2020.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2020.1.7.0
Devolutions » Devolutions Server » Version: 2020.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.10.0
Devolutions » Devolutions Server » Version: 2020.2.7.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.7.0
Devolutions » Devolutions Server » Version: 2020.2.8.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.8.0
Devolutions » Devolutions Server » Version: 2020.2.9.0

cpe:2.3:a:devolutions:devolutions_server:2020.2.9.0
Devolutions » Devolutions Server » Version: 2020.3

cpe:2.3:a:devolutions:devolutions_server:2020.3
Devolutions » Devolutions Server » Version: 2020.3.11.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.11.0
Devolutions » Devolutions Server » Version: 2020.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.12.0
Devolutions » Devolutions Server » Version: 2020.3.14.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.14.0
Devolutions » Devolutions Server » Version: 2020.3.17.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.17.0
Devolutions » Devolutions Server » Version: 2020.3.18

cpe:2.3:a:devolutions:devolutions_server:2020.3.18
Devolutions » Devolutions Server » Version: 2020.3.20

cpe:2.3:a:devolutions:devolutions_server:2020.3.20
Devolutions » Devolutions Server » Version: 2020.3.21

cpe:2.3:a:devolutions:devolutions_server:2020.3.21
Devolutions » Devolutions Server » Version: 2020.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2020.3.8.0
Devolutions » Devolutions Server » Version: 2021.1

cpe:2.3:a:devolutions:devolutions_server:2021.1
Devolutions » Devolutions Server » Version: 2021.1.17

cpe:2.3:a:devolutions:devolutions_server:2021.1.17
Devolutions » Devolutions Server » Version: 2021.1.18

cpe:2.3:a:devolutions:devolutions_server:2021.1.18
Devolutions » Devolutions Server » Version: 2021.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2021.1.7.0
Devolutions » Devolutions Server » Version: 2022.1.0

cpe:2.3:a:devolutions:devolutions_server:2022.1.0
Devolutions » Devolutions Server » Version: 2022.2.0

cpe:2.3:a:devolutions:devolutions_server:2022.2.0
Devolutions » Devolutions Server » Version: 2022.3.10.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.10.0
Devolutions » Devolutions Server » Version: 2022.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.12.0
Devolutions » Devolutions Server » Version: 2022.3.13.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.13.0
Devolutions » Devolutions Server » Version: 2022.3.2

cpe:2.3:a:devolutions:devolutions_server:2022.3.2
Devolutions » Devolutions Server » Version: 2022.3.3.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.3.0
Devolutions » Devolutions Server » Version: 2022.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.4.0
Devolutions » Devolutions Server » Version: 2022.3.5.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.5.0
Devolutions » Devolutions Server » Version: 2022.3.6.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.6.0
Devolutions » Devolutions Server » Version: 2022.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.7.0
Devolutions » Devolutions Server » Version: 2022.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.8.0
Devolutions » Devolutions Server » Version: 2022.3.9.0

cpe:2.3:a:devolutions:devolutions_server:2022.3.9.0
Devolutions » Devolutions Server » Version: 2023.1.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.0
Devolutions » Devolutions Server » Version: 2023.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.3.0
Devolutions » Devolutions Server » Version: 2023.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.4.0
Devolutions » Devolutions Server » Version: 2023.1.5.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.5.0
Devolutions » Devolutions Server » Version: 2023.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.6.0
Devolutions » Devolutions Server » Version: 2023.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.7.0
Devolutions » Devolutions Server » Version: 2023.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2023.1.8.0
Devolutions » Devolutions Server » Version: 2023.2

cpe:2.3:a:devolutions:devolutions_server:2023.2
Devolutions » Devolutions Server » Version: 2023.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2023.2.10.0
Devolutions » Devolutions Server » Version: 2023.3.14.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.14.0
Devolutions » Devolutions Server » Version: 2023.3.16.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.16.0
Devolutions » Devolutions Server » Version: 2023.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.4.0
Devolutions » Devolutions Server » Version: 2023.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.7.0
Devolutions » Devolutions Server » Version: 2023.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2023.3.8.0
Devolutions » Devolutions Server » Version: 2024.1.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.0
Devolutions » Devolutions Server » Version: 2024.1.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.10.0
Devolutions » Devolutions Server » Version: 2024.1.11.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.11.0
Devolutions » Devolutions Server » Version: 2024.1.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.12.0
Devolutions » Devolutions Server » Version: 2024.1.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.13.0
Devolutions » Devolutions Server » Version: 2024.1.14.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.14.0
Devolutions » Devolutions Server » Version: 2024.1.15.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.15.0
Devolutions » Devolutions Server » Version: 2024.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.4.0
Devolutions » Devolutions Server » Version: 2024.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.6.0
Devolutions » Devolutions Server » Version: 2024.1.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.8.0
Devolutions » Devolutions Server » Version: 2024.1.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.1.9.0
Devolutions » Devolutions Server » Version: 2024.2.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.10.0
Devolutions » Devolutions Server » Version: 2024.2.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.12.0
Devolutions » Devolutions Server » Version: 2024.2.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.13.0
Devolutions » Devolutions Server » Version: 2024.2.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.3.0
Devolutions » Devolutions Server » Version: 2024.2.5.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.5.0
Devolutions » Devolutions Server » Version: 2024.2.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.6.0
Devolutions » Devolutions Server » Version: 2024.2.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.8.0
Devolutions » Devolutions Server » Version: 2024.2.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.2.9.0
Devolutions » Devolutions Server » Version: 2024.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.0
Devolutions » Devolutions Server » Version: 2024.3.10.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.10.0
Devolutions » Devolutions Server » Version: 2024.3.11.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.11.0
Devolutions » Devolutions Server » Version: 2024.3.12.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.12.0
Devolutions » Devolutions Server » Version: 2024.3.13.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.13.0
Devolutions » Devolutions Server » Version: 2024.3.16.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.16.0
Devolutions » Devolutions Server » Version: 2024.3.17.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.17.0
Devolutions » Devolutions Server » Version: 2024.3.2.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.2.0
Devolutions » Devolutions Server » Version: 2024.3.3.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.3.0
Devolutions » Devolutions Server » Version: 2024.3.4.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.4.0
Devolutions » Devolutions Server » Version: 2024.3.6.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.6.0
Devolutions » Devolutions Server » Version: 2024.3.7.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.7.0
Devolutions » Devolutions Server » Version: 2024.3.8.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.8.0
Devolutions » Devolutions Server » Version: 2024.3.9.0

cpe:2.3:a:devolutions:devolutions_server:2024.3.9.0
Devolutions » Devolutions Server » Version: 2025.1.3.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.3.0
Devolutions » Devolutions Server » Version: 2025.1.4.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.4.0
Devolutions » Devolutions Server » Version: 2025.1.5.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.5.0
Devolutions » Devolutions Server » Version: 2025.1.6.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.6.0
Devolutions » Devolutions Server » Version: 2025.1.7.0

cpe:2.3:a:devolutions:devolutions_server:2025.1.7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-4433

Products

Pricing

Contact Us