CVE-2023-35817
Published Apr 28, 2025DevExpress before 23.1.3 allows AsyncDownloader SSRF.
Vendor archive
devexpress CVEs
Beta · best-effort9 CVEs tagged to vendor devexpress — 0 Critical, 3 High, 3 Medium, 3 Low, 0 Unrated.
CVE-2023-35816
Published Apr 28, 2025DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
CVE-2023-35815
Published Apr 28, 2025DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
CVE-2023-35814
Published Apr 28, 2025DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
CVE-2022-41479
Published Oct 18, 2022The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter.…
CVE-2022-28684
Published Aug 3, 2022This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specifi…
CVE-2021-36483
Published Aug 4, 2021DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.
CVE-2015-4670
Published Aug 18, 2015Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers to write to arbitra…
CVE-2014-2575
Published Jun 6, 2014Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows r…
Showing 1-9 of 9 CVEsPage 1 of 1