CVE-2023-23838

Mô tả

Tham khảo

• documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2023-2_release_notes.htm · Release Notes
• solarwinds.com/trust-center/security-advisories/cve-2023-23838 · Broken Link

Lỗ hổng khác của database performance analyzer

• CVE-2025-26398TRUNG BÌNH 6.4SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to…
• CVE-2023-33231TRUNG BÌNH 6.1XSS attack was possible in DPA 2023.2 due to insufficient input validation
• CVE-2023-23837CAO 7.5No exception handling vulnerability which revealed sensitive or excessive information to users.
• CVE-2022-38112CAO 7.5In DPA 2022.4 and older releases, generated heap memory dumps contain sensitive information in cleartext.
• CVE-2022-38110TRUNG BÌNH 5.4In Database Performance Analyzer (DPA) 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site …