CVE-2024-0589: Devolutions Remote Desktop Manager

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker with access to a data source to inject a malicious script via a specially crafted input in an entry.

Affected products

• Devolutions Remote Desktop Manager: up to and including 2023.3.36.0

Published 2024-01-31. Last modified 2026-06-17.