webhelpdesk vulnerabilities

2 known vulnerabilities in webhelpdesk from SolarWinds. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  SolarWinds Web Help Desk Hardcoded Credential Exploited

  CVE-2024-28987Aug 21, 2024SolarWindsEPSS 93.3%

  The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

• 9.8 Critical severity

  SolarWinds Web Help Desk Deserialization of Untrusted Data Exploited

  CVE-2024-28986Aug 13, 2024SolarWindsEPSS 84.6%

  SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, Solar