Virtualization Manager vulnerabilitiesAnd the versions its exploited flaws hit.
Virtualization Manager is made by Solarwinds. We track 3 published vulnerabilities in it, across 15 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 3 November 2021. If you run Virtualization Manager, check your version against the exploited flaws below and patch those first.
The most recent Virtualization Manager flaw added to the known-exploited list is CVE-2016-3643, on 3 November 2021. We keep watching the known-exploited list.
Which versions of Virtualization Manager do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2016-3643Exploited list, 3 Nov 2021
SolarWinds Virtualization Manager Privilege Escalation Vulnerability
up to 6.3.1
Which Virtualization Manager vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8SolarWinds Virtualization Manager Privilege Escalation Vulnerability
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.
Which Virtualization Manager flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 13%CVE-2016-3642Critical
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
- 3.7%
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."
- 1.4%CVE-2016-5709Medium
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.
Running Virtualization Manager? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.
- Matched to
- Virtualization Manager on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 3 published vulnerabilities listed under the name Virtualization Manager, across 15 versions. The most recent Virtualization Manager flaw added to the known-exploited list is CVE-2016-3643, on 3 November 2021.
1 is on the list of flaws known to be exploited. The most recently added is CVE-2016-3643.
Each flaw names its own versions, usually as ranges. The newest, CVE-2016-3643, affects up to 6.3.1. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Virtualization Manager. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.