Critical severity9.8NVD Advisory· Published Jun 17, 2016· Updated May 6, 2026
CVE-2016-3642
CVE-2016-3642
Description
The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected products
1- cpe:2.3:a:solarwinds:virtualization_manager:*:*:*:*:*:*:*:*Range: <=6.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.