Description
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | Web Help Desk | 12.8.3 Hotfix 1 and previous versions | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
SolarWinds Web Help Desk Backdoor (CVE-2024-28987)
auxiliary/gather/solarwinds_webhelpdesk_backdoor
GitHub 4 repositories
-
gh-ost00/CVE-2024-28987-POC ★ 12 · Sep 5, 2024
Web Help Desk Hardcoded Credential Vulnerability (CVE-2024-28987)
-
horizon3ai/CVE-2024-28987 ★ 8 · Sep 24, 2024
Proof of Concept Exploit for CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability
-
Darabium/CVE-2024-28987 ★ 1 · Jul 28, 2026
**CVE-2024-28987** is a critical vulnerability in SolarWinds Web Help Desk (WHD) that allows remote attackers to access sensitive ticket information using **hardcoded credentials**. This vulnerabilit…
-
alecclyde/CVE-2024-28987 ★ 1 · Apr 21, 2025
Proof of Concept Exploit for CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SolarWinds Web Help Desk - Hardcoded Credential http/cves/2024/CVE-2024-28987.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- NCSC-2024-0352 Kwetsbaarheden verholpen in Solarwinds Web Helpdesk NCSC-NL (Netherlands) · Aug 22, 2024