CVE-2018-19386
CVE-2018-19386
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 9.0%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
14 Aug 2019Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI.
Affected products
n/a · n/a