Browse CVEs

MEDIUM 6.1 CVE-2025-54392 Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerabilit… Directory Manager 11.1.25162.02+ Fix from $1,6002025-08-07 MEDIUM 6.1 CVE-2025-54395 Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data. Directory Manager 11.1.25162.02+ Fix from $1,6002025-08-07 MEDIUM 5.4 CVE-2025-54393 Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain admin… Directory Manager 11.1.25162.02+ Fix from $1,6002025-08-07 MEDIUM 5.4 CVE-2025-54396 Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this. Directory Manager 11.1.25162.02+ Fix from $1,6002025-08-07 MEDIUM 5.3 CVE-2025-54394 Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Ex… Directory Manager 11.1.25162.02+ Fix from $1,6002025-08-07 CRITICAL 10.0 CVE-2025-48748 Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password. Directory Manager after 10.0.7784.0 Fix from $2,3002025-05-29 CRITICAL 9.1 CVE-2025-48749 Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data. Directory Manager 11.1.25134.03+ Fix from $2,3002025-05-28 MEDIUM 5.3 CVE-2025-47748 Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password. Directory Manager 11.1.25134.03+ Fix from $1,6002025-05-28 MEDIUM 5.0 CVE-2025-48747 Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment fo… Directory Manager 11.1.25134.03+ Fix from $1,6002025-05-28 MEDIUM 6.5 CVE-2025-48746 Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Func… Directory Manager after 11.0.0.0 Fix from $1,6002025-05-28 CRITICAL 9.8 CVE-2025-26817 Netwrix Password Secure 9.2.0.32454 allows OS command injection. Password Secure 9.2.1+ Fix from $2,3002025-04-03 CRITICAL 9.8 CVE-2025-26818 Netwrix Password Secure through 9.2 allows command injection. Password Secure 9.2.2+ Fix from $2,3002025-04-03 CRITICAL 9.8 CVE-2023-41264 Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to… Usercube 6.0.215+ Fix from $2,3002023-11-28 CRITICAL 9.8 CVE-2022-31199 KEVEPSS 36% Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server … Auditor 10.5+ Fix from $2,3002022-11-08 HIGH 7.5 CVE-2020-15931 Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administ… Account Lockout Examiner 5.1+ Fix from $1,9502020-10-20 HIGH 7.8 CVE-2019-14969 Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service … Auditor 9.8+ Fix from $1,9502019-08-12