Web Help Desk vulnerabilities
12 known vulnerabilities in Web Help Desk from SolarWinds. 12 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Web Help Desk: Improper Authentication
SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
- 7.5 High severity
Web Help Desk: Allocation of Resources Without Limits or Throttling
SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.
- 9.8 Critical severity
Web Help Desk: Weak Authentication
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
- 9.8 Critical severity
Web Help Desk: Deserialization of Untrusted Data
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
- 9.8 Critical severity
Web Help Desk: Weak Authentication
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.
- 9.8 Critical severity
SolarWinds Web Help Desk Deserialization of Untrusted Data Exploited
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
- 7.5 High severity
Web Help Desk: Use of Hard-coded Credentials
SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions.
- 9.8 Critical severity
SolarWinds Web Help Desk Security Control Bypass Exploited
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.
- 9.8 Critical severity
SolarWinds Web Help Desk Deserialization of Untrusted Data Exploited
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CV
- 9.8 Critical severity
Web Help Desk: Deserialization of Untrusted Data
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a
- 9.1 Critical severity
SolarWinds Web Help Desk Hardcoded Credential Exploited
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- 9.8 Critical severity
SolarWinds Web Help Desk Deserialization of Untrusted Data Exploited
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, Solar