PULSE
EN VIVO0señales / 24h
FEED
vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server
← Todos los CVEs
CVE Watch

CVE-2024-28986

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVSS

Sin CVSS

EPSS

84.6%

p100

KEV

15 ago 2024

Exploit Today

80

0-100

Publicado: · Última mod.:

EPSS · 30d
84.6%EPSS · 30 días84.6%
2026-08-022026-08-31
Ficha del catálogo KEV

Producto

SolarWinds / Web Help Desk

Vulnerabilidad

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Añadido a KEV

15 ago 2024

Remediar antes de

5 sept 2024

Uso conocido en ransomware

No

Descripción resumida

SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986; https://nvd.nist.gov/vuln/detail/CVE-2024-28986

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2024-28987
99.8%
KEV80SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVE-2025-26399
99.8%
KEV80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
CVE-2025-40551
99.7%
KEV80SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
CVE-2025-40536
99.6%
KEV80SolarWinds Web Help Desk Security Control Bypass Vulnerability