CVE-2024-28987

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

93.21% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2024-10-15

Nuclei

critical · CWE-798

Published

2024-08-21

Updated

2025-10-21

Proof-of-concept exploits (5)

• alecclyde/CVE-2024-289871★ · 2025-04-21
• fa-rrel/CVE-2024-28987-POC12★ · 2024-09-05
• gh-ost00/CVE-2024-28987-POC12★ · 2024-09-05
• horizon3ai/CVE-2024-289878★ · 2024-09-24
• Darabium/CVE-2024-28987

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28987.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/solarwinds_webhelpdesk_b…

References

• CVE Record
• NVD entry

Related

• CVE-2023-7028
• CVE-2024-0195
• CVE-2024-1071
• CVE-2024-24809
• CVE-2024-27954
• CVE-2024-2876