devexpress
Security Risk Profile
79
/100
highSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 6, 2014 to present
13
Total CVEs
10
Critical+High
0
Exploited
10
Unpatched
Threat Assessment
Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
79/100
high
🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
3High
7Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
Incorrect Type Cast
1
3
SSRF
1
Most Affected Products
1. DevExpress Aspxfilemanager Control For Webforms And Mvc62
2. DevExpress DevExpress35
3. DevExpress XtraReport1
4. DevExpress Asp.net Web Forms Controls1
5. DevExpress AJAX Control Toolkit1
Recent Vulnerabilities
See more →CVE-2023-35814
CVSS 9.8critical
4/28/2025🔧 No Patch
CVE-2023-35815
CVSS 9.8critical
4/28/2025🔧 No Patch
CVE-2023-35816
CVSS 5.3medium
4/28/2025🔧 No Patch
CVE-2023-35817
CVSS 9.8critical
4/28/2025🔧 No Patch
CVE-2022-41479
CVSS 7.5high
10/18/2022🔧 No Patch
CVE-2022-28684
CVSS 8.8high
DevExpress SafeBinaryFormatter Deserialization of Untrusted Data Remote Code Execution Vulnerability
8/3/2022🔧 No Patch
CVE-2021-36483
CVSS 8.8high
DevExpress SafeBinaryFormatter Deserialization of Untrusted Data Remote Code Execution Vulnerability
8/4/2021🔧 No Patch
CVE-2015-4670
CVSS 6.4medium
8/18/2015🔧 No Patch
CVE-2014-2575
CVSS 6.5medium
6/6/2014🔧 No Patch
ZDI-22-341
CVSS 8.8high
DevExpress SafeBinaryFormatter Deserialization of Untrusted Data Remote Code Execution Vulnerability
8/16/2026🔧 No Patch
Monitor devexpress in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.