CVEDB API

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-36483

Devexpress » Devexpress » Version: N/A

cpe:2.3:a:devexpress:devexpress:-
Devexpress » Devexpress » Version: 17.2

cpe:2.3:a:devexpress:devexpress:17.2
Devexpress » Devexpress » Version: 18.1

cpe:2.3:a:devexpress:devexpress:18.1
Devexpress » Devexpress » Version: 18.1.18

cpe:2.3:a:devexpress:devexpress:18.1.18
Devexpress » Devexpress » Version: 18.2

cpe:2.3:a:devexpress:devexpress:18.2
Devexpress » Devexpress » Version: 18.2.17

cpe:2.3:a:devexpress:devexpress:18.2.17
Devexpress » Devexpress » Version: 19.1

cpe:2.3:a:devexpress:devexpress:19.1
Devexpress » Devexpress » Version: 19.1.15

cpe:2.3:a:devexpress:devexpress:19.1.15
Devexpress » Devexpress » Version: 19.2

cpe:2.3:a:devexpress:devexpress:19.2
Devexpress » Devexpress » Version: 19.2.14

cpe:2.3:a:devexpress:devexpress:19.2.14
Devexpress » Devexpress » Version: 20.1

cpe:2.3:a:devexpress:devexpress:20.1
Devexpress » Devexpress » Version: 20.1.15

cpe:2.3:a:devexpress:devexpress:20.1.15
Devexpress » Devexpress » Version: 20.2

cpe:2.3:a:devexpress:devexpress:20.2
Devexpress » Devexpress » Version: 20.2.11

cpe:2.3:a:devexpress:devexpress:20.2.11
Devexpress » Devexpress » Version: 20.21.01.102

cpe:2.3:a:devexpress:devexpress:20.21.01.102
Devexpress » Devexpress » Version: 21.1

cpe:2.3:a:devexpress:devexpress:21.1