CyberSec.Space Logo
Back to CVE Browser

CVE-2024-28987

🔥 Known Exploited (CISA KEV)CRITICAL
9.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-08-21
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Affected Platforms (CPE)

📦
Solarwinds

Web Help Desk

< 12.8.3= 12.8.3

References & Advisories

🔗 https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2
🔗 https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987
🔗 https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987

Related Vulnerabilities

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-14289

The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whos...

CVE-2026-10082

The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the pa...

CVE-2025-15662

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL be...