69 matches found
CVE-2025-26398 SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...
PT-2025-32636
Name of the Vulnerable Software and Affected Versions: SolarWinds Database Performance Analyzer affected versions not specified Description: SolarWinds Database Performance Analyzer contains a hard-coded cryptographic key. Exploitation of this issue could lead to a machine-in-the-middle MITM atta...
CVE-2025-26398: Use of Hard-coded Credentials
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...
CVE-2019-0158
Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2018-16243
SolarWinds Database Performance Analyzer DPA 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and central.cen...
The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA)’s set of utilities is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.
The vulnerability of the Intel Graphics Performance Analyzer Intel GPA utility is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA) tool, related to deficiencies in access control, allows a malicious actor to trigger a service failure.
The vulnerability of the Intel Graphics Performance Analyzer Intel GPA lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set allows a perpetrator to enhance their privileges.
The vulnerability of Intel GPA Framework installer and the Intel Graphics Performance Analyzer tool set is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2025-6682 · Intel · Intel Gpa +1
Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...
CVE-2023-33231 XSS in SolarWinds Database Performance Analyzer 2023.2
XSS attack was possible in DPA 2023.2 due to insufficient input validation...
SolarWinds Database Performance Analyzer 路径遍历漏洞
SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Inc. in the United States. The product is used for SQL query performance monitoring, analysis and tuning, etc. A security vulnerability exists in SolarWinds Database Performance Analyzer version...
PT-2023-19245 · Solarwinds · Database Performance Analyzer
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A directory traversal and file enumeration issue allows users to enumerate different folders of the server. Recommendations: At the moment, there is no information about a newer version...
CVE-2023-23837 No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
No exception handling vulnerability which revealed sensitive or excessive information to users...
CVE-2023-23838 Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server...
CVE-2023-23837 No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
No exception handling vulnerability which revealed sensitive or excessive information to users...
CVE-2023-23838 Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server...
Vulnerabilities fixed in SolarWinds Platform
Solarwinds has fixed vulnerabilities in Solarwinds Platform and the Database Performance Analyzer DPA. A pre-authenticated malicious person can exploit the vulnerabilities exploit them for attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Remote code executi...
Vulnerabilities fixed in SolarWinds Database Performance Analyzer
SolarWinds has fixed vulnerabilities in Database Performance Analyzer DPA. An authenticated malicious party can exploit the exploit the vulnerabilities to gain access to sensitive data or perform a cross-site scripting attack. SolarWinds has released updates to address the vulnerabilities fixes i...