CVE-2021-35228: SolarWinds Database Performance Analyzer

Medium severity, CVSS 4.7. EPSS: 0.6% chance of exploitation in the next 30 days.

This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.

Affected products

• SolarWinds Database Performance Analyzer: version 2021.3.7388 only

Published 2021-10-21. Last modified 2026-06-17.