Skip to main content

Database Performance Analyzer CVE-2023-23837

HIGH
Improper Handling of Exceptional Conditions (CWE-755)
2023-04-25 psirt@solarwinds.com
Information Disclosure Database Performance Analyzer
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 25, 2023 - 18:15 nvd
HIGH 7.5

DescriptionNVD

No exception handling vulnerability which revealed sensitive or excessive information to users.

AnalysisAI

No exception handling vulnerability which revealed sensitive or excessive information to users. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-755. No exception handling vulnerability which revealed sensitive or excessive information to users. Affected products include: Solarwinds Database Performance Analyzer.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Database Performance Analyzer

View all
CVE-2023-23838 MEDIUM
6.5 Apr 25

Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the serv
CVE-2023-33231 MEDIUM
6.1 Jul 18

XSS attack was possible in DPA 2023.2 due to insufficient input validation. Rated medium severity (CVSS 6.1), this vulne
CVE-2026-28322 MEDIUM
5.6 Jun 30

Stored cross-site scripting in SolarWinds Database Performance Analyzer enables a highly privileged, adjacent-network at
CVE-2021-35228 MEDIUM
4.7 Oct 21

This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from header
CVE-2025-26398 MEDIUM
5.6 Aug 12

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. Rated medium severity (CVS

Same weakness CWE-755 – Improper Handling of Exceptional Conditions

View all
CVE-2017-5638 CRITICAL POC
9.8
CVE-2018-7852 HIGH POC
7.5
CVE-2022-48328 CRITICAL POC
9.8
CVE-2021-38384 CRITICAL POC
9.8
CVE-2021-36128 CRITICAL POC
9.8
CVE-2020-24753 CRITICAL POC
9.8
CVE-2019-14431 CRITICAL POC
9.8
CVE-2019-12815 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-23837 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy