Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Web Help Desk — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Web Help Desk, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page focuses on web help desk systems, primarily tracking software developed by major vendors in the technical support and ticketing domain. It collects data on common weakness types such as cross-site scripting, authentication bypass, and improper input validation. The dataset covers vulnerabilities identified over the past several years, providing a historical overview of security flaws in customer service platforms. Readers can use this page to track a specific vendor's advisory releases, understand the prevalence of particular weakness classes within help desk software, and look up the complete vulnerability history for a specific product. The information is organized to help security teams assess risk, prioritize patching efforts, and identify recurring security patterns in web-based support tools.

Vendor: SolarWinds

CVE ID Title CVSS Severity Published
CVE-2026-28323 SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability CWE-287 9.8 Critical 2026-07-30
CVE-2026-28299 SolarWinds Web Help Desk Denial-of-Service Vulnerability CWE-770 8.2 High 2026-06-02
CVE-2025-40554 SolarWinds Web Help Desk Authentication Bypass Vulnerability CWE-1390 9.8 Critical 2026-01-28
CVE-2025-40553 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 9.8 Critical 2026-01-28
CVE-2025-40552 SolarWinds Web Help Desk Authentication Bypass Vulnerability CWE-1390 9.8 Critical 2026-01-28
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 9.8 Critical 2026-01-28
CVE-2025-40537 SolarWinds Web Help Desk Hardcoded Credentials Vulnerability CWE-798 7.5 High 2026-01-28
CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability CWE-693 8.1 High 2026-01-28
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability CWE-502 9.8 Critical 2025-09-23
CVE-2024-28988 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability CWE-502 9.8 Critical 2025-09-01
CVE-2025-26400 SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability CWE-611 5.3 Medium 2025-07-29
CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability CWE-321 5.5 Medium 2025-02-11
CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability CWE-22 5.3 Medium 2024-12-10
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability CWE-798 9.1 Critical 2024-08-21
CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability CWE-502 9.8 Critical 2024-08-13
CVE-2021-35251 Sensitive Data Disclosure Vulnerability CWE-209 5.3 Medium 2022-03-09
CVE-2021-35232 Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries CWE-798 6.8 Medium 2021-12-27
CVE-2021-35243 HTTP PUT & DELETE Methods Enabled CWE-749 5.3 Medium 2021-12-23
CVE-2021-32076 Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass CWE-290 5.3 Medium 2021-08-26

All 19 known CVE vulnerabilities affecting Web Help Desk with full Chinese analysis, references, and POCs where available.