SolarWinds Web Help Desk

Name: SolarWinds Web Help Desk
Brand: SolarWinds

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical2high5medium0low

updated 2026-10-26

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-28987US	critical9.1OT critical	93.3% (100th)	KEV	no fix	2024-08-21	≤ 12.8.3 Hotfix 1 and previous versions
CVE-2025-26399US	critical9.8OT critical	90.1% (100th)	KEV	no fix	2025-09-23	≤ 12.8.7 and below
CVE-2025-40551US	—OT critical	84.2% (100th)	KEV	2026.1	2026-01-28	3 versions
CVE-2025-40536US	critical9.8OT critical	73.6% (99th)	KEV	2026.1	2026-01-28	3 versions
CVE-2024-28986US	—OT critical	84.6% (100th)	KEV	no fix	2024-08-13	≤ previous versions ≤12.8.3
CVE-2025-40554US	—	60.6% (99th)	Exploit	2026.1	2026-01-28	3 versions
CVE-2025-40552US	—	52.0% (99th)	Exploit	2026.1	2026-01-28	2 versions
CVE-2025-40553US	—	68.0% (99th)	—	2026.1	2026-01-28	3 versions
CVE-2024-28988US	—	39.1% (99th)	—	no fix	2025-09-01	≤ 12.8.3 HF 2 and previous versions
CVE-2021-32076US	medium5.3	1.17% (67th)	—	no fix	2021-08-26	≤ unspecified ≤12.7.5
CVE-2026-28323US	—	1.03% (63rd)	—	2026.2.1	2026-07-30	3 versions
CVE-2021-35251US	medium5.3	0.95% (61st)	—	12.7.8	2022-03-10	12.7.7 HF 1 and Previous Versions → 12.7.8
CVE-2021-35243US	high7.5	0.93% (60th)	—	no fix	2021-12-23	≤ 12.7.7 and previous versions 12.7.7 HF1
CVE-2026-28299US	high7.5	0.72% (54th)	—	2026.2	2026-06-02	2 versions
CVE-2025-40537US	—OT elevated	0.59% (48th)	—	2026.1	2026-01-28	3 versions
CVE-2024-45709US	medium5.5	0.50% (42nd)	—	no fix	2024-12-10	≤ 12.8.3 HF3 and previous versions
CVE-2021-35232US	medium6.1OT elevated	0.32% (25th)	—	12.7.7 HF 1	2021-12-27	12.7.7 and previous versions → 12.7.7 HF 1
CVE-2025-26400US	medium6.5	0.30% (22nd)	—	no fix	2025-07-29	≤ 12.8.6 and previous versions
CVE-2024-28989US	—OT elevated	0.29% (21st)	—	no fix	2025-02-11	≤ 12.8.4 and previous versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data5 CVEs
CWE-798Use of Hard-coded Credentials4 CVEs
CWE-1390Weak Authentication2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs

sources (3)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)19 CVEs
DECERT-Bund (BSI CSAF)8 CVEs
NLNCSC-NL (CSAF)6 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan