Database Performance Analyzer
SolarWinds · 10 CVEs
SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability
Jun 30, 2026
SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
Aug 12, 2025
XSS in SolarWinds Database Performance Analyzer 2023.2
Jul 18, 2023
Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
Apr 25, 2023
No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
Apr 25, 2023
Sensitive Information Disclosure Vulnerability
Jan 20, 2023
Reflected Cross-Site Scripting Vulnerability
Jan 20, 2023
Cross-Site Scripting Vulnerability using SQL Query
Apr 21, 2022
Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388
Oct 21, 2021
SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, rela…
Dec 15, 2020
SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component,…
Aug 14, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-28322 | SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability | MEDIUM | 0.39% | Jun 30, 2026 |
| CVE-2025-26398 | SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability | MEDIUM | 0.19% | Aug 12, 2025 |
| CVE-2023-33231 | XSS in SolarWinds Database Performance Analyzer 2023.2 | MEDIUM | 0.50% | Jul 18, 2023 |
| CVE-2023-23838 | Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1 | MEDIUM | 1.27% | Apr 25, 2023 |
| CVE-2023-23837 | No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1 | HIGH | 0.81% | Apr 25, 2023 |
| CVE-2022-38112 | Sensitive Information Disclosure Vulnerability | HIGH | 0.42% | Jan 20, 2023 |
| CVE-2022-38110 | Reflected Cross-Site Scripting Vulnerability | MEDIUM | 0.40% | Jan 20, 2023 |
| CVE-2021-35229 | Cross-Site Scripting Vulnerability using SQL Query | MEDIUM | 3.19% | Apr 21, 2022 |
| CVE-2021-35228 | Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388 | MEDIUM | 0.58% | Oct 21, 2021 |
| CVE-2018-16243 | SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen,… | MEDIUM | 1.38% | Dec 15, 2020 |
| CVE-2018-19386 | SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected i… | MEDIUM | 9.04% | Aug 14, 2019 |
Showing 1 to 10 of 10 CVEs