CVE-2021-35229 MEDIUM

CVE-2021-35229: Cross-Site Scripting Vulnerability using SQL Query

Vendor Solarwinds
Product Database Performance Monitor
Weakness CWE-79 · XSS
Published April 21, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query

Key dates

02Disclosure timeline

April 21, 2022 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-6423 Cross-site Scripting vulnerability in BigProf products CVE-2024-13354 Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-7124 Reflected XSS in DInGO dLibra CVE-2025-10926 JSON Field - Critical - Cross Site Scripting - SA-CONTRIB-2025-106 CVE-2023-29435 WordPress Cryptocurrency All-in-One Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)