CVE-2022-2316: Devolutions Server

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.

Affected products

• Devolutions Devolutions Server: before 2022.2 (fixed in 2022.2)

Published 2022-07-06. Last modified 2026-06-17.