CVE-2021-35254: SolarWinds Webhelpdesk

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future.

Affected products

• SolarWinds Webhelpdesk: before 12.7.8 (fixed in 12.7.8); version 12.7.8 only

Published 2022-03-25. Last modified 2026-06-17.