Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:database_performance_analyzer:2021.3.7388:*:*:*:*:*:*:*

part: a version: 2021.3.7388 update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductDatabase Performance Analyzer (b8d6d857-ff3b-5032-bcf9-7c4cfb00a239)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35228 vulnerable 2026-06-03 14:44:56.250279 Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388
MEDIUM (5.5)
This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.
Published: 2021-10-21T17:43:01.468Z
Updated: 2024-09-16T23:56:04.954Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.