CVE-2021-35229

Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@solarwinds.com

Published

2022-04-21

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Database Performance Analyzer (Solarwinds)
• Database Performance Monitor (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2022-2_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35229