SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability (CVE-2026-28322)

Summary

SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

Affected Products

SolarWinds Database Performance Analyzer 2026.1 and previous versions

Fixed Software Release

SolarWinds Database Performance Analyzer 2026.2

Advisory Details

Severity

5.6 Medium

Advisory ID

CVE-2026-28322

First Published

06/30/2026

Fixed Version

SolarWinds Database Performance Analyzer 2026.2

CVSS Score

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

Download PDF

Send an Email