Advisories · Technology

DevExpress.

Every CVE that names DevExpress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-35817 CVE record

CVSS 5.0 Medium

Server-side request forgery in DevExpress
- DevExpress
- Server-side request forgery (SSRF)
Not analysed yet 28 Apr 2025
CVE-2023-35816 CVE record

CVSS 3.5 Low

Path traversal in DevExpress
- DevExpress
- Path traversal
Not analysed yet 28 Apr 2025
CVE-2023-35815 CVE record

CVSS 3.5 Low

Deserialization of untrusted data in DevExpress
- DevExpress
- Insecure deserialization
Not analysed yet 28 Apr 2025
CVE-2023-35814 CVE record

CVSS 3.5 Low

Deserialization of untrusted data in DevExpress
- DevExpress
- Insecure deserialization
Not analysed yet 28 Apr 2025
CVE-2022-28684 CVE record

CVSS 8.8 High

Deserialization of untrusted data in DevExpress
- DevExpress
- Insecure deserialization
Not analysed yet 3 Aug 2022