CVE-2021-35243: solarwinds web help desk

csirt@kutim:~/threat-intel/cve/CVE-2021-35243

CVSS 7.5 · High EPSS 0,90%

Kerentanan Exposed Dangerous Method or Function pada solarwinds web help desk. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the origin server removes the association between the target resource and its current functionality. Improper use of these methods may lead to a loss of integrity.

Rincian

Terbit di NVD: 23 Desember 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-749: Exposed Dangerous Method or Function
EPSS (30 hari): 0,90% peluang dieksploitasi; lebih tinggi dari 58,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
solarwinds	web help desk	Semua versi hingga 12.7.7

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en... release notes · advisory vendor
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35243 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.