CVE-2021-35229mediumCWE-79

CVE-2021-35229: medium-severity vulnerability in SolarWinds Database Performance Monitor

Cross-Site Scripting Vulnerability using SQL Query

Published · Updated

Follow this CVE+ Monitor Database Performance Monitor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 3.2%
Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
SolarWinds · Database Performance Monitor