CVE-2022-28684

🗓️ 03 Aug 2022 15:20:46Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 59 Views

Remote code execution vulnerability in DevExpress due to lack of proper validation of user-supplied data. Requires authentication.

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation is vulnerable to arbitrary code execution due to DevExpress SafeBinaryFormatter (CVE-2022-28684)	29 Sep 202214:41	–	ibm
ATTACKERKB	CVE-2022-28684	3 Aug 202216:15	–	attackerkb
Circl	CVE-2022-28684	29 Jun 202211:03	–	circl
CNNVD	DevExpress 代码问题漏洞	3 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-28684	3 Aug 202215:20	–	cvelist
EUVD	EUVD-2022-33126	3 Aug 202215:20	–	euvd
NVD	CVE-2022-28684	3 Aug 202216:15	–	nvd
Prion	Deserialization of untrusted data	3 Aug 202216:15	–	prion
Positive Technologies	PT-2022-19168 · Devexpress · Safebinaryformatter +1	24 Jun 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-28684	5 Feb 202520:48	–	redhatcve

NVD

Vulners

Node

devexpress devexpressRange18.1.0–18.1.18

devexpress devexpressRange18.2.0–18.2.17

devexpress devexpressRange19.1.0–19.1.15

devexpress devexpressRange19.2.0–19.2.14

devexpress devexpressRange20.1.0–20.1.15

devexpress devexpressRange20.2.0–20.2.11

devexpress devexpressRange21.1.0–21.1.9

devexpress devexpressRange21.2.0–21.2.7

devexpress devexpressMatch22.1.0

[
  {
    "product": "DevExpress",
    "vendor": "DevExpress",
    "versions": [
      {
        "status": "affected",
        "version": "20.21.01.102"
      }
    ]
  }
]