SolarWinds
11 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-28995 |
Serv-U | — | 0.9961 | 2024-07-17 | 2024-08-07 | SolarWinds Serv-U contains a path traversal vulnerability that allows an attacke | |
CVE-2024-28987 |
Web Help Desk | — | 0.9330 | 2024-10-15 | 2024-11-05 | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that coul | |
CVE-2025-26399 |
Web Help Desk | — | 0.9012 | 2026-03-09 | 2026-03-12 | RW | SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerabili |
CVE-2024-28986 |
Web Help Desk | — | 0.8463 | 2024-08-15 | 2024-09-05 | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerabil | |
CVE-2025-40551 |
Web Help Desk | — | 0.8418 | 2026-02-03 | 2026-02-06 | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerabil | |
CVE-2025-40536 |
Web Help Desk | — | 0.7356 | 2026-02-12 | 2026-02-15 | SolarWinds Web Help Desk contains a security control bypass vulnerability that c | |
CVE-2026-28318 |
Serv-U | — | 0.4365 | 2026-06-05 | 2026-06-19 | SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability th | |
CVE-2021-35247 |
Serv-U | — | — | 2022-01-21 | 2022-02-04 | SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validati | |
CVE-2020-10148 |
Orion | — | — | 2021-11-03 | 2022-05-03 | SolarWinds Orion API contains an authentication bypass vulnerability that could | |
CVE-2021-35211 |
Serv-U | — | — | 2021-11-03 | 2021-11-17 | RW | SolarWinds Serv-U contains an unspecified memory escape vulnerability which can |
CVE-2016-3643 |
Virtualization Manager | — | — | 2021-11-03 | 2022-05-03 | SolarWinds Virtualization Manager allows for privilege escalation through levera |