CVE-2021-35254CWE-20

Authenticated Remote Code Execution in WebHelpDesk 12.7.8

High · published March 25, 2022

CVSS v3.1
8.2
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01014 · 62.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-03-25T18:02Z
EPSS history
Timeline
  • 25 MAR 18:02Z
    Authenticated Remote Code Execution in WebHelpDesk 12.7.8
    cvelistv5