Database Performance Analyzer
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:database_performance_analyzer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Database Performance Analyzer (b8d6d857-ff3b-5032-bcf9-7c4cfb00a239) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-28322 |
vulnerable | 2026-07-29 00:37:43.112766 |
SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability
MEDIUM (5.6)
SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
Published: 2026-06-30T22:15:40.728Z
Updated: 2026-07-02T03:57:26.377Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26398 |
vulnerable | 2026-06-08 07:12:51.592488 |
SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
MEDIUM (5.6)
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
Published: 2025-08-12T08:10:54.116Z
Updated: 2026-02-26T17:49:42.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33231 |
vulnerable | 2026-06-08 06:06:22.071323 |
XSS in SolarWinds Database Performance Analyzer 2023.2
MEDIUM (6.1)
XSS attack was possible in DPA 2023.2 due to insufficient input validation
Published: 2023-07-18T16:50:43.296Z
Updated: 2024-10-21T18:55:07.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23838 |
vulnerable | 2026-06-08 05:56:04.524482 |
Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
MEDIUM (6.5)
Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-04T16:28:51.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23837 |
vulnerable | 2026-06-08 05:56:04.524009 |
No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
HIGH (7.5)
No exception handling vulnerability which revealed sensitive or excessive information to users.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-04T16:32:40.705Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38112 |
vulnerable | 2026-06-08 05:47:15.804839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38110 |
vulnerable | 2026-06-08 05:47:15.802365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35229 |
vulnerable | 2026-06-08 05:32:48.561416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.