Log in Start free

DevExpress

Products

ProductCVEsExploitedLatest
DevExpress5–Apr 28, 2025

Exploited and recent CVEs

  • CVE-2023-35814 Low 3.5 DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms. 0.6%
  • CVE-2023-35816 Low 3.5 DevExpress before 23.1.3 allows arbitrary TypeConverter conversion. 0.6%
  • CVE-2023-35815 Low 3.5 DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data. 0.6%
  • CVE-2023-35817 Medium 5.0 DevExpress before 23.1.3 allows AsyncDownloader SSRF. 0.5%
  • CVE-2022-28684 High 8.8 This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within 3.8%