Solarwinds Help Desk vulnerabilities

• solarwinds web help desk SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability CVE-2026-28323 9.8 CriticalJuly 30, 2026
• solarwinds web help desk SolarWinds Web Help Desk Denial-of-Service Vulnerability CVE-2026-28299 8.2 HighJune 2, 2026
• solarwinds web help desk SolarWinds Web Help Desk Authentication Bypass Vulnerability CVE-2025-40554 Public exploit EPSS 60.6% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-40553 EPSS 68.0% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Authentication Bypass Vulnerability CVE-2025-40552 Public exploit EPSS 52.0% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-40551 In KEVPublic exploit EPSS 84.2% 9.8 CriticalJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Hardcoded Credentials Vulnerability CVE-2025-40537 7.5 HighJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Security Control Bypass Vulnerability CVE-2025-40536 In KEVPublic exploit EPSS 73.6% 8.1 HighJanuary 28, 2026
• solarwinds web help desk SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability CVE-2025-26399 In KEVPublic exploit EPSS 90.6% 9.8 CriticalSeptember 23, 2025
• solarwinds web help desk SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability CVE-2024-28988 EPSS 41.7% 9.8 CriticalSeptember 1, 2025
• solarwinds web help desk SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability CVE-2025-26400 5.3 MediumJuly 29, 2025
• solarwinds web help desk SolarWinds Web Help Desk Cryptographic Key Management Vulnerability CVE-2024-28989 5.5 MediumFebruary 11, 2025
• solarwinds web help desk SolarWinds Web Help Desk Local File Read Vulnerability CVE-2024-45709 5.3 MediumDecember 10, 2024
• solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Hardcoded Credential Vulnerability CVE-2024-28987 In KEVPublic exploit EPSS 93.3% 9.1 CriticalAugust 21, 2024
• solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability CVE-2024-28986 In KEV EPSS 84.6% 9.8 CriticalAugust 13, 2024
• solarwinds web help desk Sensitive Data Disclosure Vulnerability CVE-2021-35251 5.3 MediumMarch 9, 2022
• solarwinds web help desk HTTP PUT & DELETE Methods Enabled CVE-2021-35243 5.3 MediumDecember 23, 2021
• solarwinds web help desk Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass CVE-2021-32076 5.3 MediumAugust 26, 2021
• solarwinds web help desk SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name. CVE-2019-16961 5.4 MediumJanuary 15, 2021
• solarwinds web help desk SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. CVE-2019-16954 5.4 MediumJanuary 6, 2021
• solarwinds web help desk SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name... CVE-2019-16960 5.4 MediumJanuary 4, 2021
• solarwinds web help desk SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. CVE-2019-16956 5.4 MediumJanuary 4, 2021
• solarwinds help desk Cross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to... CVE-2019-16958 5.4 MediumDecember 1, 2020