SolarWinds Web Help Desk Flaw Allows Remote Code Execution

**Executive Summary:** The report describes critical vulnerabilities in SolarWinds Web Help Desk (notably CVE-2024-28987), including a Java deserialization RCE and a hardcoded credential that could permit unauthorized access; SolarWinds released Hotfix 12.8.3 HF2 (and references HF1) which adds whd-security.jar, updates whd-core.jar and whd-web.jar, and requires modifying tomcat_server_template.xml to add a SecurityValve as mitigation. The advisory notes affected install paths, provides installation and uninstallation steps, and recommends applying the hotfix despite limited reproduction of the RCE without authentication.