What’s Vulnerable › Products

SolarWinds Database Performance Analyzer vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your SolarWinds Database Performance Analyzer version is affected

Latest SolarWinds Database Performance Analyzer vulnerabilities

• CVE-2026-28322 — SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability (CVSS 5.6)
• CVE-2025-26398 — SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability (CVSS 6.4)
• CVE-2023-33231 — XSS in SolarWinds Database Performance Analyzer 2023.2 (CVSS 6.1)
• CVE-2023-23838 — Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 6.5)
• CVE-2023-23837 — No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 7.5)
• CVE-2022-38112 — Sensitive Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2022-38110 — Reflected Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2021-35229 — Cross-Site Scripting Vulnerability using SQL Query (CVSS 6.1)
• CVE-2021-35228 — Reflected cross site scripting affecting SolarWinds: DPA 2021.3.7388 (CVSS 4.7)
• CVE-2018-16243 — (CVSS 5.4)
• CVE-2018-19386 — (CVSS 6.1)