CVE DatabaseCVE-2024-28988

Updated 2026-06-17한국어 권고문 →

CVE-2024-289889.8/CRITICALCWE-502

CVE-2024-28988 Official NVD Security Advisory (CVSS 9.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

software

Published Date

2025-09-01

CVSS v3.1

9.8

CRITICAL

EPSS (30d)

41.7%

FIRST.org

CISA KEV

Not Listed

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Scope

Impacted configurations listed under CVE-2024-28988

Overview

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would...

Mitigation

Review official patches and verify network isolation controls.

Affected Products & Version Scope

Refer to official NVD CPE configuration entries

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Apply the latest security updates provided by the official software maintainers.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Audit runtime exposure and verify patching status via automated scanning.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Official NVD Technical Description

We recommend all Web Help Desk customers apply the patch, which is now available.

We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

CVSS Score: 9.8 (CRITICAL)
CWE IDs: CWE-502

Official Vendor Advisories & References

NVD Original English Description

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing this report. The ZDI team was able to discover an unauthenticated attack during their research. We recommend all Web Help Desk customers apply the patch, which is now available. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-3

Source: psirt@solarwinds.com · Broken Link

https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28988

Source: psirt@solarwinds.com · Patch, Vendor Advisory

Frequently Asked SecOps Questions (CVE-2024-28988)

FAQ

Q1. How critical is CVE-2024-28988 and is it actively exploited in the wild?

CVE-2024-28988 is rated CVSS 9.8 (CRITICAL) with a 30-day EPSS exploitation probability of 41.7%. Organizations running affected versions should prioritize patching based on network exposure.

Q2. Which vendors and products are affected by CVE-2024-28988?

Primary impacted vendors include security-advisory across software. Scope summary: Refer to official NVD CPE configuration entries

Q3. What temporary mitigations or workarounds exist for CVE-2024-28988 before patching?

[Mitigation] Review official patches and verify network isolation controls. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION