Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:virtualization_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductVirtualization Manager (f663c53b-3902-5eaa-88c3-9da62628b80f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5709 vulnerable 2026-06-08 05:07:57.558503 Details available
SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.
Published: 2016-06-24T17:00:00.000Z
Updated: 2024-08-06T01:07:59.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3643 vulnerable 2026-06-08 05:07:45.729239 Details available
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."
Published: 2016-06-17T15:00:00.000Z
Updated: 2025-10-21T23:55:51.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3642 vulnerable 2026-06-08 05:07:45.728642 Details available
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Published: 2016-06-17T15:00:00.000Z
Updated: 2024-08-06T00:03:34.448Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.