CVE-2024-28987

🔥 Known Exploited (CISA KEV)CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-08-21

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Affected Platforms (CPE)

📦

Solarwinds

Web Help Desk

< 12.8.3= 12.8.3

References & Advisories

🔗 https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2

🔗 https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987

🔗 https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987

Vulnerability Description

Affected Platforms (CPE)

Web Help Desk

References & Advisories

相关漏洞威胁