GCVE - cpe:2.3:a:solarwinds:webhelpdesk:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:webhelpdesk:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Solarwinds (`c393915a-764f-5773-8a18-db4a4d0f1496`)
Product	Webhelpdesk (`f40f74de-099f-5b0c-b06a-52b99316a774`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28987`	vulnerable	2026-06-08 06:33:28.332683	SolarWinds Web Help Desk Hardcoded Credential Vulnerability CRITICAL (9.1) The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Published: 2024-08-21T21:17:23.041Z Updated: 2025-10-21T22:55:46.764Z Open on db.gcve.eu Reference links https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987 https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28986`	vulnerable	2026-06-08 06:33:28.327912	SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability CRITICAL (9.8) SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available. Published: 2024-08-13T22:06:45.234Z Updated: 2025-10-21T22:55:47.324Z Open on db.gcve.eu Reference links https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28986 https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35254`	vulnerable	2026-06-08 05:32:48.595048	Authenticated Remote Code Execution in WebHelpDesk 12.7.8 HIGH (8.2) SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future. Published: 2022-03-25T18:02:27.000Z Updated: 2024-08-04T00:33:51.251Z Open on db.gcve.eu Reference links https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-8-Hotfix-1-Release-Notes?language=en_US https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35254	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-35232`	vulnerable	2026-06-08 05:32:48.566085	Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries MEDIUM (6.8) Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database. Published: 2021-12-27T18:48:18.158Z Updated: 2024-09-17T03:44:02.601Z Open on db.gcve.eu Reference links https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35232 https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.