← All advisories

High severity8.8NVD Advisory· Published Aug 4, 2021· Updated Jun 17, 2026

CVE-2021-36483

CVE-2021-36483

Description

DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Devexpress/DevExpress
cpe:2.3:a:devexpress:devexpress:*:*:*:*:*:*:*:*
Range: <=21.1
DevExpress/DevExpress.XtraReports.UIdescription
Devexpress/Reportingllm-create
Range: <=21.1
Devexpress/XtraReports.UIllm-fuzzy
Range: <=21.1

Patches

Vulnerability mechanics

References

6

gist.github.com/tree-chtsec/27013ed6cb297b24e44f6359439b678envdThird Party Advisory
supportcenter.devexpress.com/ticket/details/t1031535/reporting-unsafe-data-type-deserializationnvdPermissions RequiredVendor Advisory
supportcenter.devexpress.com/ticket/details/t708194/net-web-controls-unsafe-data-type-deserializationnvdPermissions RequiredVendor Advisory
supportcenter.devexpress.com/ticket/details/t714296/net-desktop-controls-unsafe-data-type-deserializationnvdPermissions RequiredVendor Advisory
www.chtsecurity.com/news/a01d1bc6-19c8-4187-b343-6bc685efe64fnvdThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-22-341/nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.