Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductWeb Help Desk (4fa527cd-6714-5468-a682-84ccf3550fad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28299 vulnerable 2026-06-08 07:55:15.160489 SolarWinds Web Help Desk Denial-of-Service Vulnerability
HIGH (8.2)
SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.
Published: 2026-06-02T19:31:56.824Z
Updated: 2026-06-03T22:19:15.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40554 vulnerable 2026-06-08 07:25:04.969792 SolarWinds Web Help Desk Authentication Bypass Vulnerability
CRITICAL (9.8)
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk.
Published: 2026-01-28T07:36:50.177Z
Updated: 2026-02-26T15:04:48.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40553 vulnerable 2026-06-08 07:25:04.969426 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CRITICAL (9.8)
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Published: 2026-01-28T07:35:41.825Z
Updated: 2026-02-27T04:55:46.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40552 vulnerable 2026-06-08 07:25:04.969136 SolarWinds Web Help Desk Authentication Bypass Vulnerability
CRITICAL (9.8)
SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication.
Published: 2026-01-28T07:34:37.773Z
Updated: 2026-02-27T04:55:45.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40551 vulnerable 2026-06-08 07:25:04.968727 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CRITICAL (9.8)
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.
Published: 2026-01-28T07:33:09.603Z
Updated: 2026-02-26T15:04:49.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40537 vulnerable 2026-06-08 07:25:04.950301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40536 vulnerable 2026-06-08 07:25:04.949797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26400 vulnerable 2026-06-08 07:12:51.595285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26399 vulnerable 2026-06-08 07:12:51.593532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45709 vulnerable 2026-06-08 06:48:08.938742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28989 vulnerable 2026-06-08 06:33:28.336663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28988 vulnerable 2026-06-08 06:33:28.334618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28987 vulnerable 2026-06-08 06:33:28.332732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28986 vulnerable 2026-06-08 06:33:28.328802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35251 vulnerable 2026-06-08 05:32:48.592581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35243 vulnerable 2026-06-08 05:32:48.579040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35232 vulnerable 2026-06-08 05:32:48.565140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32076 vulnerable 2026-06-08 05:31:54.678159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.