Devexpress: >> Devexpress >> 21.2.7 Security Vulnerabilities
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
CVSS Score
3.5
EPSS Score
0.002
Published
2025-04-28
DevExpress before 23.1.3 allows AsyncDownloader SSRF.
CVSS Score
5.0
EPSS Score
0.001
Published
2025-04-28
DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.
CVSS Score
3.5
EPSS Score
0.003
Published
2025-04-28
DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.
CVSS Score
3.5
EPSS Score
0.001
Published
2025-04-28