PT-2023-13592 · Unknown · Database Performance Analyzer

Published 2023-01-20 · Updated 2023-08-03 · CVE-2022-38110

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Database Performance Analyzer (DPA) versions 2022.4 and older

Description The issue concerns authenticated reflected cross-site scripting, where certain URL vectors are susceptible to this type of attack.

Recommendations For versions 2022.4 and older, update to a version that is newer than 2022.4 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-38110

Affected Products

Database Performance Analyzer

References · 5

• https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-1_release_notes.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38110 · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/CVE-2022-38110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38110 · Security Note
• https://t.me/cibsecurity/56768 · Telegram Post