SolarWinds Database Performance Analyzer Cross-Site Scripting Vulnerability

Solarwinds SolarWinds Database Performance Analyzer is a database performance analyzer from SolarWinds, Inc. The product is used for SQL query performance monitoring, analysis, tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer v2021.3.7388, which stems from a lack of input cleanup of one of the output fields extracted from the header of a specific section of a page, and an attacker would need to perform a man-in-the-middle attack to change the remote victim’s header.