Devexpress: >> Devexpress >> 19.2 Security Vulnerabilities
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
CVSS Score
3.5
EPSS Score
0.002
Published
2025-04-28
DevExpress before 23.1.3 allows AsyncDownloader SSRF.
CVSS Score
5.0
EPSS Score
0.001
Published
2025-04-28
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
CVSS Score
3.5
EPSS Score
0.003
Published
2025-04-28
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
CVSS Score
3.5
EPSS Score
0.001
Published
2025-04-28
DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.
CVSS Score
8.8
EPSS Score
0.014
Published
2021-08-04