Class familySolarWinds · Web Help Desk
SolarWinds Web Help Desk hard-coded credentials flaws, 2021–2026
3 Web Help Desk CVEs with CWE-798 weaknesses, 27 Dec 2021 to 28 Jan 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
2023’23
1 2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-35232 | 27 Dec 2021 | Hard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries | Grouped by weakness | 46.4 |
| CVE-2024-28987KEV | 21 Aug 2024 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | Grouped by weakness | 69.3 |
| CVE-2025-40537 | 28 Jan 2026 | SolarWinds Web Help Desk Hardcoded Credentials Vulnerability | Grouped by weakness | 14.8 |