PT-2022-10449 · Unknown · Database Performance Monitor

Published 2022-04-21 · Updated 2022-05-03 · CVE-2021-35229

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Database Performance Monitor versions prior to 2022.1.7779

Description A cross-site scripting issue is present when using complex SQL queries.

Recommendations For versions prior to 2022.1.7779, update to a version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-35229

Affected Products

Database Performance Monitor

References · 4

• https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2022-2_release_notes.htm · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/cve-2021-35229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-35229 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35229 · Vendor Advisory