DP
Product
Database Performance Analyzer
11
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 9Low 0
Watch
Add Database Performance Analyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-23837 | 7.5 | Apr 25 | No exception handling vulnerability which revealed sensitive or excessive information to users Affected: before 2023.2 |
| CVE-2022-38112 | 7.5 | Jan 20 | In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext Affected: through 2022.4 |
| CVE-2023-23838 | 6.5 | Apr 25 | Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server Affected: before 2023.2 |
| CVE-2025-26398 | 6.4 | Aug 12 | SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key Affected: before 2025.3 |
| CVE-2023-33231 | 6.1 | Jul 18 | XSS attack was possible in DPA 2023.2 due to insufficient input validation Affected: before 2023.2.100 |
| CVE-2021-35229 | 6.1 | Apr 21 | Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query Affected: before 2022.2 |
| CVE-2018-19386 | 6.1 | Aug 14 | SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the… Affected: 11.1.457 |
| CVE-2026-28322 | 5.6 | Jun 30 | SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability Affected: 2026.1 and below |
| CVE-2022-38110 | 5.4 | Jan 20 | In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting Affected: through 2022.4 |
| CVE-2018-16243 | 5.4 | Dec 15 | SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen,… Affected: 11.1.468; 12.0.3074 |
| CVE-2021-35228 | 4.7 | Oct 21 | This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross… Affected: 2021.3.7388 |
Showing 11