VulnerabilitycriticalExploited in the wild

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

The Hacker Newsby @TheHackersNewsOct 15, 2024 · 00:00 UTC (Oct 15, 2024)1 min read1

Read at thehackernews.com

Analyze CVE-2024-28987 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-28987 CVE-2024-28986

Tags: cve-2024-28987 cve-2024-28986 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-28986	Java Deserialization RCE in SolarWinds Web Help Desk	9.8	85%	KEV	Aug 13, 2024 KEV Aug 15, 2024
CVE-2024-28987	Hardcoded Credential in SolarWinds Web Help Desk Allows Unauthenticated Access	9.1	93%	KEV	Aug 21, 2024 KEV Oct 15, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Oct 16, 2024 Vulnerability / Data Protection The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk (WHD) software to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.