Critical severity · published Aug 13, 2024
CVE-2024-28986
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
In wildKEV
9.8
CVSS
84.6%
EPSS
Yes
On KEV
Description
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine.
While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.
However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)84.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Aug 15, 2024
Federal remediation dueSep 5, 2024
Ransomware campaign useNot known
Affected products
Which versions
WH
Web Help Desk · SolarWinds
previous versions through 12.8.3 · source: vendor, NVD, KEV
WE
Webhelpdesk · Solarwinds
through 12.8.3 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-28986
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-28986
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
www.solarwinds.com
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28986
support.solarwinds.com
https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1
More from Web Help Desk
9.8
CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
9.8
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
9.8
CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
9.1
CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
9.8
CVE-2026-28323
SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability