CVE-2024-28988

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing this report. The ZDI team was able to discover an unauthenticated attack during their research.  We recommend all Web Help Desk customers apply the patch, which is now available.  We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

• CWE-502

• https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-3Broken Link
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28988Patch, Vendor Advisory

Published

Sep 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28981Hitachi Vantara Pentaho Data Integration & Analytics version…8.5
• CVE-2024-28982Hitachi Vantara Pentaho Business Analytics Server versions b…8.2
• CVE-2024-28983Hitachi Vantara Pentaho Business Analytics Server prior to v…6.1
• CVE-2024-28984Hitachi Vantara Pentaho Business Analytics Server prior to v…6.1
• CVE-2024-28986SolarWinds Web Help Desk was found to be susceptible to a Ja…9.8
• CVE-2024-28987The SolarWinds Web Help Desk (WHD) software is affected by a…9.1
• CVE-2024-28989SolarWinds Web Help Desk was found to have a hardcoded crypt…5.5
• CVE-2024-2899A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-28990SolarWinds Access Rights Manager (ARM) was found to contain …8.8
• CVE-2024-28991SolarWinds Access Rights Manager (ARM) was found to be susce…8
• CVE-2024-28992The SolarWinds Access Rights Manager was susceptible to a Di…8.3
• CVE-2024-28993The SolarWinds Access Rights Manager was susceptible to a Di…8.3