Lucene search
+L

3950 matches found

BDU FSTEC
BDU FSTEC
•added 2026/01/29 12:00 a.m.•15 views

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to a flaw in data protection mechanisms, allows attackers to enhance their privileges.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

8.1CVSS8.6AI score0.73562EPSS
SaveExploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/29 12:00 a.m.•32 views

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

10CVSS7.6AI score0.51997EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/29 12:00 a.m.•23 views

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and execute arbitrary commands.

The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...

10CVSS6.3AI score0.60642EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/29 12:00 a.m.•27 views

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, which stems from the use of strictly encrypted user credentials, allows a hacker to escalate their privileges.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

7.5CVSS7.6AI score0.00594EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/29 12:00 a.m.•15 views

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to defects in the deserialization mechanism, allows a hacker to execute arbitrary code.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.67975EPSS
SaveExploits1References3Affected Software1
Rapid7 Blog
Rapid7 Blog
•added 2026/01/28 2:53 p.m.•17 views

Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554

Overview On January 28, 2026, SolarWinds published an advisory for multiple new vulnerabilities affecting their Web Help Desk product. Web Help Desk is an IT help desk ticketing and asset management software solution. Of the six new CVEs disclosed in the advisory, four are critical, and allow a...

9.8CVSS9.8AI score0.84181EPSS
SaveExploits6
OSV
OSV
•added 2026/01/28 8:16 a.m.•32 views

CVE-2025-40552

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication...

9.8CVSS5.8AI score0.67975EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/28 8:16 a.m.•15 views

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.67975EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/28 8:16 a.m.•18 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS0.00594EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/28 8:16 a.m.•22 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.1AI score0.84181EPSS
SaveExploits3References3
NVD
NVD
•added 2026/01/28 8:16 a.m.•20 views

CVE-2025-40552

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication...

9.8CVSS0.51997EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/28 8:16 a.m.•29 views

CVE-2025-40553

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS6.1AI score0.67975EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/28 8:16 a.m.•21 views

CVE-2025-40554

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk...

9.8CVSS6AI score0.60642EPSS
SaveExploits2References2
OSV
OSV
•added 2026/01/28 8:16 a.m.•24 views

CVE-2025-40537

SolarWinds Web Help Desk was found to be susceptible to a hardcoded credentials vulnerability that, under certain situations, could allow access to administrative functions...

7.5CVSS5.7AI score0.00594EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/28 8:16 a.m.•18 views

CVE-2025-40551

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication...

9.8CVSS0.84181EPSS
SaveExploits3References3
NVD
NVD
•added 2026/01/28 8:16 a.m.•16 views

CVE-2025-40554

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk...

9.8CVSS0.60642EPSS
SaveExploits2References2
NVD
NVD
•added 2026/01/28 8:16 a.m.•13 views

CVE-2025-40536

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality...

9.8CVSS0.73562EPSS
SaveExploits4References4
OSV
OSV
•added 2026/01/28 8:16 a.m.•23 views

CVE-2025-40536

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality...

9.8CVSS8.2AI score0.895EPSS
SaveExploits5References4
Vulnrichment
Vulnrichment
•added 2026/01/28 7:36 a.m.•8 views

CVE-2025-40554 SolarWinds Web Help Desk Authentication Bypass Vulnerability

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk...

9.8CVSS5.8AI score0.60642EPSS
SaveExploits2References2
EUVD
EUVD
•added 2026/01/28 7:36 a.m.•11 views

EUVD-2025-206480

SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk...

9.8CVSS5.8AI score0.60642EPSS
SaveExploits2References2
Rows per page
Query Builder