CVE-2026-28322

Published: Jun 30, 2026Modified: Jul 2, 2026

5.6

Vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

Exploitability: 0.4 / Impact: 5.2

Source: psirt@solarwinds.com (Secondary)

Description

SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2026-2_release_notes.htm

Source: psirt@solarwinds.com

https://support.solarwinds.com/SuccessCenter/s/article/DPA-Secure-Configuration-Guide-Best-Practices-and-Recommendations?language=en_US

Source: psirt@solarwinds.com

https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28322

Source: psirt@solarwinds.com

Timeline

No history available yet.