Product by SolarWinds

    SolarWinds Web Help Desk

    23 known vulnerabilities in SolarWinds Web Help Desk (SolarWinds), 5 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    5

    Actively exploited (KEV)

    1

    Used by ransomware

    10

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SolarWinds Web Help Desk (SolarWinds)
    CriticalCVE-2025-26399

    SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2025-40551

    SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2024-28986

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2025-40536

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

    In CISA KEV

    		8.1
    CriticalCVE-2024-28987

    SolarWinds Web Help Desk Hardcoded Credential Vulnerability

    In CISA KEV

    		9.1
    CriticalCVE-2025-40553

    SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

    		9.8
    CriticalCVE-2025-40554

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    		9.8
    CriticalCVE-2025-40552

    SolarWinds Web Help Desk Authentication Bypass Vulnerability

    		9.8
    CriticalCVE-2024-28988

    SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability

    		9.8
    CriticalCVE-2026-28323

    SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

    		9.8
    HighCVE-2026-28299

    SolarWinds Web Help Desk Denial-of-Service Vulnerability

    		8.2
    MediumCVE-2019-16956

    SolarWinds Web Help Desk: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2019-16961

    SolarWinds Web Help Desk: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2025-40537

    SolarWinds Web Help Desk Hardcoded Credentials Vulnerability

    		7.5
    MediumCVE-2019-16960

    SolarWinds Web Help Desk: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2019-16954

    SolarWinds Web Help Desk: security vulnerability

    		5.4
    MediumCVE-2021-32076

    Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass

    		5.3
    MediumCVE-2021-35251

    Sensitive Data Disclosure Vulnerability

    		5.3
    HighCVE-2021-35243

    HTTP PUT & DELETE Methods Enabled

    		5.3
    MediumCVE-2024-45709

    SolarWinds Web Help Desk Local File Read Vulnerability

    		5.3
    MediumCVE-2025-26400

    SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability

    		5.3
    MediumCVE-2021-35232

    SolarWinds Web Help Desk: Use of Hard-coded Credentials

    also in 1 other product

    		6.8
    MediumCVE-2024-28989

    SolarWinds Web Help Desk Cryptographic Key Management Vulnerability

    		5.5

    News

    All products by SolarWinds