6.4
CVE-2025-26398
- EPSS 0.17%
- Veröffentlicht 12.08.2025 08:10:54
- Zuletzt bearbeitet 17.11.2025 16:10:05
- Quelle psirt@solarwinds.com
- CVE-Watchlists
- Unerledigt
SolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability
SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle (MITM) attack against users. This vulnerability requires additional software not installed by default, local access to the server and administrator level privileges on the host.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Solarwinds ≫ Database Performance Analyzer Version < 2025.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.064 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 0.5 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| psirt@solarwinds.com | 5.6 | 0.3 | 5.2 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26398
https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2025-3_release_notes.htm