CVE-2018-19386 is a vulnerability in SolarWinds Database Performance Analyzer
Published on August 14, 2019
SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI.
Products Associated with CVE-2018-19386
Want to know whenever a new CVE is published for SolarWinds Database Performance Analyzer? stack.watch will email you.
Exploit Probability
EPSS
23.27%
Percentile
95.84%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.