Exploited Vulnerabilities DailyCVE-2016-3643: SolarWinds Virtualization Manager
EPSS3.6%No. 1478 of 1739 in KEV
CVE year2016~5 yrs before listing
Same vendor in KEV11
Same product1
| Field | Value |
|---|---|
| Vendor | SolarWinds |
| Product | Virtualization Manager |
| Name | SolarWinds Virtualization Manager Privilege Escalation Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-264 |
CISA description
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A SolarWinds Virtualization Manager vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.