Actively exploited in the wild
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds - Web Help Desk · Listed in the CISA KEV since 2024-10-15. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-28987
CriticalCVSS 9.1KEVSummary
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
Risk Assessment
An unauthenticated attacker could access internal functionality and modify data, potentially compromising system integrity.
Recommendation
Update SolarWinds Web Help Desk to a patched version and change default credentials.
Other vulnerabilities in SolarWinds Web Help Desk
See all- CVE-2026-28323Critical
SolarWinds Web Help Desk is affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.
- CVE-2024-28986CriticalActively exploited
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.
- CVE-2026-28299High
SolarWinds Web Help Desk is affected by a denial-of-service vulnerability that can cause the server to crash due to insufficient memory.
Original NVD description (English source)
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.