DevExpress

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

DevExpress records in CISA KEV

No DevExpress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Devexpress 6 records MEDIUM Ajax Control Toolkit 1 record LOW Asp.net Web Forms Controls 1 record HIGH Aspxfilemanager Control For Webforms And Mvc 1 record MEDIUM

Records

1 record in Asp.net Web Forms Controls · all components

TI-2022-19911 CVE-2022-41479 · GHSA-6prj-5r8w-3x38

The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms…

HIGH 66

The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01417 Published 2022-10-18 No fix listed CWE-639

Open these records in search →

Critical	3
High	3
Medium	3
Low	0
No CVSS	0