← CVE Radar
CVE-2024-28987SolarWinds Web Help Desk Hardcoded Credential Vulnerability
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
9.1 CRITICALEPSS 93.29%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.1 | CRITICAL | 3.1SolarWinds (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Details
- CVE ID
- CVE-2024-28987
- Status
- Published
- Assigner (CNA)
- SolarWinds
- Published
- Aug 21, 2024
- Last modified
- 2025-10-21 22:55 UTC
- Weaknesses
- CWE-798 · Use of Hard-coded Credentials
Affected Products
As published by the CNA in the CVE record.
SolarWindsWeb Help Desk1 version range
- 12.8.3 Hotfix 1 and previous versions
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS