Known vulnerabilities in Database Performance Analyzer

Vendor: SolarWinds
Software: Database Performance Analyzer
Software CPE: cpe:2.3:a:solarwinds:dpa:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Database Performance Analyzer Database Performance Analyzer is affected by 15 known vulnerabilities: 1 critical, 4 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139617 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28322		 CWE-79 Low
No
No
 2026.2 27.07.2026 SB20260727220
#VU114012 - Use of Hard-coded Cryptographic Key
CVE-2025-26398		 CWE-321 Low
No
No
 2025.3 13.08.2025 SB2025081366
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 2024.2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU78542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33231		 CWE-79 Low
No
No
 2023.2.100 21.07.2023 SB2023072144
#VU75211 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-23838		 CWE-22 Low
No
No
 2023.2 18.04.2023 SB2023041834
#VU75210 - Externally-generated error message containing sensitive information
CVE-2023-23837		 CWE-211 Low
No
No
 2023.2 18.04.2023 SB2023041834
#VU71426 - Cleartext Storage of Sensitive Information
CVE-2022-38112		 CWE-312 Low
No
No
 2023.1 23.01.2023 SB2023012322
#VU71425 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38110		 CWE-79 Low
No
No
 2023.1 23.01.2023 SB2023012322
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 2024.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU62602 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-35229		 CWE-79 Low
No
No
 2022.2 26.04.2022 SB2022042624
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU57861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-35228		 CWE-79 Low
No
No
 2021.3.7438 02.11.2021 SB2021110221
#VU49403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26870		 CWE-79 Medium
No
No
 2023.2 07.10.2020 SB2021011214
SB2021072052
SB2020100725
and 4 more