CVE-2024-28986

criticalpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.846 · 100 %ileEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

84.6% (100th) EPSS

CVSS 9.8 · critical

Is it mine?

8 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · ncsc_nl

added 2024-08-15remediate by 2024-09-05

required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-27

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · psirt@solarwinds.comexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502USCWE-502US

affected products (8)

Products and version ranges known to be affected.

SolarWinds Web Help Desk≤ previous versions ≤12.8.3enisa_euvdEU
SolarWinds Inc. SolarWinds Web Help Desk≤ 12.8.3fstec_bduRU
web_help_deskall versionsncsc_nlNLcpe:2.3:a:solarwinds:web_help_desk:12.8.3:-:*:*:*:*:*:*
web_help_deskall versionsncsc_nlNLcpe:2.3:a:solarwinds:web_help_desk:12.8.3:*:*:*:*:*:*:*
web_help_deskall versionsncsc_nlNLcpe:2.3:a:solarwinds:web_help_desk:previous_versions:*:*:*:*:*:*:*
solarwinds web help deskall versionsncsc_nlNLcpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*
solarwinds web help desk≤ 12.8.2nvdUScpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*
solarwinds web help desk= 12.8.3nvdUScpe:2.3:a:solarwinds:web_help_desk:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2024-0352Kwetsbaarheden verholpen in Solarwinds Web HelpdeskNL2024-08-22csaf · ncsc_nlNL
Solarwinds heeft kwetsbaarheden verholpen in Web Helpdesk

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu ncsc_nl nvd NVD CVE.org MITRE

published 2024-08-13modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan