CVE-2018-19386: XSS
First published: Wed Aug 14 2019(Updated: )
SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SolarWinds Database Performance Analyzer | =11.1.457 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-19386?
CVE-2018-19386 refers to a vulnerability in SolarWinds Database Performance Analyzer 11.1.457 that allows for Reflected XSS.
What is the severity level of CVE-2018-19386?
The severity level of CVE-2018-19386 is medium with a CVSS score of 6.1.
How does CVE-2018-19386 affect SolarWinds Database Performance Analyzer?
CVE-2018-19386 affects SolarWinds Database Performance Analyzer 11.1.457 by enabling Reflected XSS.
How can I fix the CVE-2018-19386 vulnerability?
To fix the CVE-2018-19386 vulnerability, it is recommended to update SolarWinds Database Performance Analyzer to a version that addresses the security issue.
Where can I find more information about CVE-2018-19386?
More information about CVE-2018-19386 can be found at the following links: https://i.imgur.com/Y7t2AD6.png, https://medium.com/greenwolf-security/reflected-xss-in-solarwinds-database-performance-analyzer-988bd7a5cd5
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/description
- agent/author
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/solarwinds
- canonical/solarwinds database performance analyzer
- version/solarwinds database performance analyzer/11.1.457