WH
Product
Web Help Desk
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 3Medium 9Low 0
Watch
Add Web Help Desk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-26400 | 6.5 | Jul 29 | SolarWinds Web Help Desk was reported to be affected by an XML External Entity Injection (XXE) vulnerability that could lead to information disclosure Affected: before 12.8.7 |
| CVE-2024-28989 | 5.5 | Feb 11 | SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software Affected: before 12.8.5 |
| CVE-2024-45709 | 5.5 | Dec 10 | SolarWinds Web Help Desk was susceptible to a local file read vulnerability Affected: before 12.8.4 |
| CVE-2019-16961 | 5.4 | Jan 15 | SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name Affected: 12.7.0 |
| CVE-2019-16954 | 5.4 | Jan 6 | SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket Affected: 12.7.0 |
| CVE-2019-16960 | 5.4 | Jan 4 | SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field Affected: 12.7.0 |
| CVE-2019-16956 | 5.4 | Jan 4 | SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket Affected: 12.7.0 |
| CVE-2021-35251 | 5.3 | Mar 10 | Sensitive information could be displayed when a detailed technical error message is posted Affected: before 12.7.8 |
| CVE-2021-32076 | 5.3 | Aug 26 | Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2 Affected: through 12.7.2 |
Showing 9