CVE-2023-35816

low-risk
Published 2025-04-28

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.

Do I need to act?

-
0.31% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.5/10 Low
NETWORK / HIGH complexity

Affected Products (4)

Devexpress
Devexpress
Devexpress
Devexpress

Affected Vendors

Devexpress

References (4)

Vendor Advisory https://code-white.com/public-vulnerability-list/
Permissions Required https://supportcenter.devexpress.com/ticket/details/t1127422/insecure-arbitrary-...
Permissions Required https://supportcenter.devexpress.com/ticket/details/t1159641/net-desktop-and-web...
Permissions Required https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-...
23
/ 100
low-risk
Severity 12/34 · Low
Exploitability 1/34 · Minimal
Exposure 10/34 · Low