How many SolarWinds webhelpdesk CVEs are in CISA KEV?

Yes — 2 of SolarWinds webhelpdesk's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of SolarWinds webhelpdesk are affected?

9 distinct SolarWinds webhelpdesk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SolarWinds webhelpdesk CVEs?

SolarWinds webhelpdesk's CVEs most often map to these CWE weakness types: CWE-798 (Use of Hard-coded Credentials), CWE-20 (Improper Input Validation), CWE-502 (Deserialization of Untrusted Data).

How many critical SolarWinds webhelpdesk vulnerabilities are there?

SolarWinds webhelpdesk has 2 critical and 2 high-severity CVEs.

What is the average severity of SolarWinds webhelpdesk CVEs?

The average CVSS base score across SolarWinds webhelpdesk's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

SolarWinds

8 CVEs

2 in CISA KEV

SolarWinds webhelpdesk Vulnerabilities

Name: SolarWinds webhelpdesk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for webhelpdesk by SolarWinds.

8

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.4

Avg CVSS

2020–2024

Last updated August 21, 2024

Overview

SolarWinds webhelpdesk has 8 published CVE records since 2020, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting SolarWinds webhelpdesk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of SolarWinds webhelpdesk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of SolarWinds webhelpdesk's CVEs are confirmed exploited in the wild.

Public exploits

2

2 of SolarWinds webhelpdesk's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every SolarWinds webhelpdesk version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.7.0 <= v <= 12.7.03 CVEs
<= 12.8.32 CVEs
< 12.7.81 CVE
<= 12.7.61 CVE
12.7.1 <= v <= 12.7.11 CVE
12.7.8 <= v <= 12.7.81 CVE

Fixed in

> 12.8.32 CVEs
12.7.81 CVE
12.7.8 HF 11 CVE

Find a version

8 CVEs

Sort

SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVE-2024-28987
CISA KEV
Public exploit
Patch
CWE-798
Added to CISA KEV 2024-10-15
Critical · CVSS 9.3
EPSS 93.3% (100th pct)2024-08-21
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
CVE-2024-28986
CISA KEV
Public exploit
Patch
CWE-502
Added to CISA KEV 2024-08-15
Critical · CVSS 9.3
EPSS 84.6% (100th pct)2024-08-13
High vulnerability · 2022-03-25
CVE-2021-35254
Patch
CWE-20
High · CVSS 8.8
EPSS 1.0% (59th pct)2022-03-25
Medium vulnerability · 2021-12-27
CVE-2021-35232
Patch
CWE-798
Medium · CVSS 6.8
EPSS 0.3% (22th pct)2021-12-27
Medium vulnerability · 2020-12-21
CVE-2019-16959
Medium · CVSS 6.5
EPSS 1.6% (74th pct)2020-12-21
Medium vulnerability · 2020-12-18
CVE-2019-16955
Medium · CVSS 5.4
EPSS 1.7% (74th pct)2020-12-18
Medium vulnerability · 2020-12-18
CVE-2019-16957
Medium · CVSS 5.4
EPSS 1.5% (71th pct)2020-12-18
High vulnerability · 2020-04-27
CVE-2019-20002
High · CVSS 7.8
EPSS 1.3% (67th pct)2020-04-27

Common weakness types

The CWE weakness categories most often found in SolarWinds webhelpdesk CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many SolarWinds webhelpdesk CVEs were published each year.

2020

4

2021

1

2022

1

2024

2

Other SolarWinds products

Browse vulnerabilities for other products by SolarWinds.

serv-u55 CVEs orion platform51 CVEs SolarWinds Platform45 CVEs access rights manager32 CVEs Web Help Desk22 CVEs serv-u file server21 CVEs serv-u ftp server12 CVEs database performance analyzer11 CVEs

All SolarWinds vulnerabilities

Frequently asked questions

Common questions about SolarWinds webhelpdesk vulnerabilities.

How many CVEs does SolarWinds webhelpdesk have?: SolarWinds webhelpdesk has 8 published CVE records since 2020.
How many SolarWinds webhelpdesk CVEs are in CISA KEV?: Yes — 2 of SolarWinds webhelpdesk's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for SolarWinds webhelpdesk vulnerabilities?: Yes — 2 of SolarWinds webhelpdesk's CVEs have a known public exploit.
Which versions of SolarWinds webhelpdesk are affected?: 9 distinct SolarWinds webhelpdesk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in SolarWinds webhelpdesk CVEs?: SolarWinds webhelpdesk's CVEs most often map to these CWE weakness types: CWE-798 (Use of Hard-coded Credentials), CWE-20 (Improper Input Validation), CWE-502 (Deserialization of Untrusted Data).
How many critical SolarWinds webhelpdesk vulnerabilities are there?: SolarWinds webhelpdesk has 2 critical and 2 high-severity CVEs.
What is the average severity of SolarWinds webhelpdesk CVEs?: The average CVSS base score across SolarWinds webhelpdesk's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track SolarWinds webhelpdesk vulnerabilities

Monitor new SolarWinds webhelpdesk vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing