CVE-2016-3642

Critical · 9.8

CVSS

9.8

EPSS

13.3%

Published

Jun 17, 2016

CISA due date

—

The record

The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Affected packages

Ecosystem	Package	Introduced	Fixed