CVE-2023-23837
Assigner: SolarWinds
Published: 2023-04-25T00:00:00
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: Windows
product: Database Performance Analyzer
vendor: SolarWinds
versions: status: affected
version: 2022.3 and previous versions
datePublic: 2023-04-24T16:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: <p>No exception handling vulnerability which revealed sensitive or excessive information to users.</p>
value: No exception handling vulnerability which revealed sensitive or excessive information to users.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: description: No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
solutions: supportingMedia: base64: no
type: text/html
value: <p>SolarWinds recommends upgrading to the latest version of DPA as soon as it becomes available.</p>
value: SolarWinds recommends upgrading to the latest version of DPA as soon as it becomes available.


source: discovery: UNKNOWN
title: No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
x_generator: engine: vulnogram 0.1.0-rc1