CVE-2025-13765

Published: Nov 27, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Affected (2)

Products: Devolutions: Devolutions Server

Devolutions

1 product

Devolutions Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Devolutions Devolutions Server	Before 2025.2.21.0
Devolutions Devolutions Server	From 2025.3.2.0 to 2025.3.10.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://devolutions.net/security/advisories/DEVO-2025-0018/

Source: security@devolutions.net

Vendor Advisory

Timeline

No history available yet.