Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-28322

5.6 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): High (H)
Privileges Required (PR): High (H)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): None (N)

created 2 weeks, 2 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 2 days ago

SolarWinds Database Performance Analyzer Stored Cross-Site Scripting Vulnerability

SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28322 vendor-advisory
https://documentation.solarwinds.com/en/success_center/dpa/content/release_note… release-notes
https://support.solarwinds.com/SuccessCenter/s/article/DPA-Secure-Configuration… x_secure-configuration-guide

Affected products

Database Performance Analyzer

==2026.1 and below

Suggestion detail

References

Affected products