CVE-2024-28988

Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 12.8.3 Hotfix 2

Description SolarWinds Web Help Desk is susceptible to a Java deserialization Remote Code Execution issue. Successful exploitation of this issue allows an unauthenticated attacker to execute arbitrary commands on the host machine. The vulnerability resides in the AjaxProxy component and involves improper deserialization of untrusted data. This flaw is actively exploited.

Recommendations Apply the hotfix released by SolarWinds for versions prior to 12.8.3 Hotfix 2.