[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZHM8wKydbuVpYPEQFATKA2IFL9O96mnNrhfKPpxCbns":3,"g5a-family:solarwinds\u002Fweb_help_desk":194,"g5a-ex:solarwinds\u002Fweb_help_desk@*":195},{"success":4,"data":5},true,{"product":6,"versions":74,"topVulnerabilitiesByEpss":103,"kevVulnerabilities":162,"seoMetadata":172,"meta":191},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":73},"solarwinds","web_help_desk",28,11,2,"2025-02-11",[14,18,20,22,24,26,28,30,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"12.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"12.4",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"12.4.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"12.5",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"12.5.1",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"12.5.2",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"12.6",{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},"12.7.0",4,{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.1",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.10",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.11",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.12",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.13",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.2",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.3",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.4",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.5",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.6",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.7",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.8",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"12.7.9",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.0",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.1",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.1.824",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.2",{"version":68,"cve_count":11,"kev_count":11,"has_kev":4},"12.8.3",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.4",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"12.8.5","Web Help Desk by Solarwinds is a technology product with 28 tracked versions and 11 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":32,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":11,"kev_count":11,"has_kev":4},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},[104,112,118,125,130,134,139,145,150,157],{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":109,"severity":110,"isKev":4,"epssScore":111},"CVE-2024-28987","The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.","2024-08-21",9.1,"v3.1","Critical",0.93299,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":109,"severity":110,"isKev":4,"epssScore":117},"CVE-2024-28986","SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. \n\nWhile it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.  \n\nHowever, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.","2024-08-13",9.8,0.84628,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":124},"CVE-2019-16956","SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.","2021-01-04",5.4,"Medium",0.0173,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":122,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":129},"CVE-2019-16961","SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.","2021-01-15",0.01488,{"cveId":131,"description":132,"publishedDate":121,"cvssScore":122,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":133},"CVE-2019-16960","SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field.",0.01347,{"cveId":135,"description":136,"publishedDate":137,"cvssScore":122,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":138},"CVE-2019-16954","SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.","2021-01-06",0.01343,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":144},"CVE-2021-32076","Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTTP request and changing the referrer from the public IP address to the loopback.","2021-08-26",5.3,0.01172,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":143,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":149},"CVE-2021-35251","Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation.","2022-03-10",0.00949,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"cvssVersion":109,"severity":155,"isKev":17,"epssScore":156},"CVE-2021-35243","The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.","2021-12-23",7.5,"High",0.0093,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":143,"cvssVersion":109,"severity":123,"isKev":17,"epssScore":161},"CVE-2024-45709","SolarWinds Web Help Desk was susceptible to a local file read vulnerability.  This vulnerability requires the software be installed on Linux and configured to use non-default development\u002Ftest mode making exposure to the vulnerability very limited.","2024-12-10",0.00496,[163,168],{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"severity":110,"isKev":4,"epssScore":111,"cisaVulnName":164,"cisaDateAdded":165,"cisaShortDescription":166,"cisaRequiredAction":167},"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","2024-10-15","SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"severity":110,"isKev":4,"epssScore":117,"cisaVulnName":169,"cisaDateAdded":170,"cisaShortDescription":171,"cisaRequiredAction":167},"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","2024-08-15","SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.",{"title":173,"metaDescription":174,"keywords":175,"structuredData":176},"Web Help Desk by Solarwinds - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Web Help Desk by Solarwinds covering 28 versions with 11 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Web Help Desk vulnerabilities, Web Help Desk security, Web Help Desk CVE, Solarwinds Web Help Desk, Web Help Desk threat intelligence, Solarwinds security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Web Help Desk KEV, Web Help Desk exploited vulnerabilities",{"@context":177,"@type":178,"name":179,"description":174,"url":180,"manufacturer":181,"applicationCategory":185,"softwareVersion":186,"mainEntity":187},"https:\u002F\u002Fschema.org","SoftwareApplication","Web Help Desk","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsolarwinds\u002Fweb_help_desk",{"@type":182,"name":183,"url":184},"Organization","Solarwinds","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsolarwinds","Security Software","28 versions tracked",{"@type":188,"name":189,"description":190,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Web Help Desk Security Vulnerabilities","Security vulnerabilities affecting Web Help Desk by Solarwinds",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":192,"apiVersion":193},"2026-10-30T19:00:06.670Z","3.0",[],{"rows":196,"total":11,"capped":17,"failed":16},[197,203],{"cveId":105,"name":164,"severity":110,"cvss":108,"added":165,"epss":111,"published":198,"ranges":199,"checked":4,"hits":202,"covers":17},"2024-08-21T22:15:04.35",[200,68,201],"before 12.8.3","12.8.3-hotfix1",[],{"cveId":113,"name":169,"severity":110,"cvss":116,"added":170,"epss":117,"published":204,"ranges":205,"checked":4,"hits":207,"covers":17},"2024-08-13T23:15:16.627",[206,68],"up to 12.8.2",[]]