CVE-2018-16243 in Database Performance Analyzer

Summary

by MITRE • 12/16/2020

SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Disclosure: 12/16/2020
• Moderation: accepted
• Entry: VDB-166421
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.01359
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-16243
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-16243
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-16243/