CVE-2018-19386

概要

参考情報

• i.imgur.com/Y7t2AD6.png · Exploit
• medium.com/greenwolf-security/reflected-xss-in-solarwinds-database-performance-analyzer-988bd7a5cd5 · Exploit

database performance analyzer のその他の脆弱性

• CVE-2025-26398中 6.4SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to…
• CVE-2023-33231中 6.1XSS attack was possible in DPA 2023.2 due to insufficient input validation
• CVE-2023-23838中 6.5Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server.
• CVE-2023-23837高 7.5No exception handling vulnerability which revealed sensitive or excessive information to users.
• CVE-2022-38112高 7.5In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.