Solarwinds Virtualization Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Solarwinds Virtualization Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2016-3642 — CVSS 9.8 (critical): The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted…
• CVE-2016-3643 — CVSS 7.8 (high) — actively exploited: SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as…
• CVE-2016-5709 — CVSS 4.7 (medium): SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with…