DevExpress vulnerabilities
5 published CVEs name DevExpress among the affected products.
- 5Published CVEs5 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-35817
DevExpress before 23.1.3 allows AsyncDownloader SSRF.
DevExpress · DevExpress
Medium5.0 - CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
DevExpress · DevExpress
Low3.5 - CVE-2023-35815
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
DevExpress · DevExpress
Low3.5 - CVE-2023-35814
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
DevExpress · DevExpress
Low3.5 - CVE-2022-28684
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this…
DevExpress · DevExpress
High8.8