CVE-2022-38110: Reflected Cross-Site Scripting Vulnerability

Reflected Cross-Site Scripting Vulnerability

Status

Published

2023-01-20

Updated

2025-04-03

Assigning organization

SolarWinds

Description

In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Database Performance Analyzer (DPA)

Default version status: unaffected

SolarWinds to ≤ 2022.4affected

References

https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-1_release_notes.htm ↗
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38110 ↗