medium5.5
CVE-2021-35228
This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a…
Impact
This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Database Performance Analyzer | Version 2021.3.7388 |
Weakness classification
References
- NVD record
- CVE.org record
- https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2021-3-7438_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35228
- https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2021-3-7438_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35228