WE
Product
Webhelpdesk
On CISA KEVExploited in the wild
8
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch
Add Webhelpdesk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28986 In wildKEV | 9.8 | Aug 13 | SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability Affected: through 12.8.3 |
| CVE-2024-28987 In wildKEV | 9.1 | Aug 21 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability Affected: through 12.8.3 |
| CVE-2021-35254 | 8.8 | Mar 25 | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk Affected: before 12.7.8; 12.7.8 |
| CVE-2019-20002 | 7.8 | Apr 27 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is… Affected: 12.7.1 |
| CVE-2019-16959 | 6.5 | Dec 21 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket Affected: 12.7.0 |
| CVE-2021-35232 | 6.1 | Dec 27 | Hard coded credentials discovered in SolarWinds Web Help Desk product Affected: through 12.7.6 |
| CVE-2019-16957 | 5.4 | Dec 18 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account Affected: 12.7.0 |
| CVE-2019-16955 | 5.4 | Dec 18 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request Affected: 12.7.0 |
Showing 8