Devexpress

9 CVEs across 4 Devexpress products. Browse Devexpress vulnerabilities, severities, and proof-of-concept exploits.

Devexpress products with known CVEs

ProductCVEs
Devexpress6
Ajax Control Toolkit1
Asp.net Web Forms Controls1
Aspxfilemanager Control For Webforms And Mvc1
Devexpress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-35817Medium5.02025-04-28DevExpress before 23.1.3 allows AsyncDownloader SSRF.
CVE-2023-35816Low3.52025-04-28DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
CVE-2023-35815Low3.52025-04-28DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
CVE-2023-35814Low3.52025-04-28DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
CVE-2022-41479High7.52022-10-18The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r=…
CVE-2022-28684High8.82022-08-03This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulner…
CVE-2021-36483High8.82021-08-04DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.
CVE-2015-46702015-08-18Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers…
CVE-2014-25752014-06-06Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x be…