solarwinds web help desk

Name: solarwinds web help desk
Brand: solarwinds

productUS

cpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical2high8medium0low

updated 2026-10-26

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-28987US	critical9.1OT critical	93.3% (100th)	KEV	12.8.3	2024-08-21	2 versions
CVE-2025-26399US	critical9.8OT critical	90.1% (100th)	KEV	no fix	2025-09-23	2 versions
CVE-2025-40551US	—OT critical	84.2% (100th)	KEV	2026.1	2026-01-28	< 2026.1
CVE-2025-40536US	critical9.8OT critical	73.6% (99th)	KEV	2026.1	2026-01-28	< 2026.1
CVE-2024-28986US	—OT critical	84.6% (100th)	KEV	no fix	2024-08-13	3 versions
CVE-2025-40554US	—	60.6% (99th)	Exploit	2026.1	2026-01-28	< 2026.1
CVE-2025-40552US	—	52.0% (99th)	Exploit	2026.1	2026-01-28	< 2026.1
CVE-2025-40553US	—	68.0% (99th)	—	2026.1	2026-01-28	< 2026.1
CVE-2024-28988US	—	39.1% (99th)	—	no fix	2025-09-01	2 versions
CVE-2019-16956US	medium5.4	1.73% (77th)	—	no fix	2021-01-04	= 12.7.0
CVE-2019-16961US	medium5.4	1.49% (74th)	—	no fix	2021-01-15	= 12.7.0
CVE-2019-16960US	medium5.4	1.35% (71st)	—	no fix	2021-01-04	= 12.7.0
CVE-2019-16954US	medium5.4	1.34% (71st)	—	no fix	2021-01-06	= 12.7.0
CVE-2021-32076US	medium5.3	1.17% (67th)	—	no fix	2021-08-26	≤ 12.7.2
CVE-2026-28323US	—	1.03% (63rd)	—	2026.2.1	2026-07-30	< 2026.2.1
CVE-2021-35251US	medium5.3	0.95% (61st)	—	12.7.8	2022-03-10	< 12.7.8
CVE-2021-35243US	high7.5	0.93% (60th)	—	no fix	2021-12-23	≤ 12.7.7
CVE-2026-28299US	high7.5	0.71% (53rd)	—	2026.2	2026-06-02	< 2026.2
CVE-2025-40537US	—OT elevated	0.59% (47th)	—	2026.1	2026-01-28	< 2026.1
CVE-2024-45709US	medium5.5	0.50% (42nd)	—	12.8.4	2024-12-10	< 12.8.4
CVE-2025-26400US	medium6.5	0.30% (21st)	—	12.8.7	2025-07-29	< 12.8.7
CVE-2024-28989US	—OT elevated	0.29% (20th)	—	12.8.5	2025-02-11	< 12.8.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-798Use of Hard-coded Credentials3 CVEs
CWE-1390Weak Authentication2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE22 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan