DevExpress vulnerabilities
5 published CVEs name DevExpress among the affected products.
- Published CVEs
- 5
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 1Low 3Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20254
Newest CVEs
- CVE-2023-35817
DevExpress before 23.1.3 allows AsyncDownloader SSRF.
DevExpress · DevExpress
Medium5.0 - CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
DevExpress · DevExpress
Low3.5 - CVE-2023-35815
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
DevExpress · DevExpress
Low3.5 - CVE-2023-35814
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
DevExpress · DevExpress
Low3.5 - CVE-2022-28684
This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this…
DevExpress · DevExpress
High8.8