CVE-2023-35815

CRITICAL 9.8CVE-2023-35815 · Published 28/04/2025 · updated 17/06/2026

In short

CVE-2023-35815 is a CRITICAL (CVSS 9.8) vulnerability affecting devexpress (devexpress).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.6% of all vulnerabilities.
Fix: update to 21.2.12 or later.

Package	Affected versions	Patched versions
devexpress devexpress	`= 22.1.8= 22.2.4= 22.2.5< 21.2.12`	`21.2.12`

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 22.1.8= 22.2.4= 22.2.5< 21.2.12

21.2.12

More vulnerabilities in devexpress

See all →