NE
Vendor
Netwrix
17
CVEs
1
On KEV
0
New 30D
Products
AU9.8
Auditor
Netwrix
2 CVEs1 on KEV0 new
DM10.0
Directory Manager
Netwrix
11 CVEs0 on KEV0 new
PS9.8
Password Secure
Netwrix
2 CVEs0 on KEV0 new
AL7.5
Account Lockout Examiner
Netwrix
1 CVEs0 on KEV0 new
US9.8
Usercube
Netwrix
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54397 | DM Directory Manager Netwrix | 4.3 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users |
| CVE-2025-54392 | DM Directory Manager Netwrix | 6.1 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189 |
| CVE-2025-54395 | DM Directory Manager Netwrix | 6.1 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data |
| CVE-2025-54396 | DM Directory Manager Netwrix | 5.4 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection |
| CVE-2025-54394 | DM Directory Manager Netwrix | 5.3 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources |
| CVE-2025-54393 | DM Directory Manager Netwrix | 5.4 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection |
| CVE-2025-48748 | DM Directory Manager Netwrix | 10.0 | May 29 | Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password |
| CVE-2025-48747 | DM Directory Manager Netwrix | 5.0 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource |
| CVE-2025-48746 | DM Directory Manager Netwrix | 6.5 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function |
| CVE-2025-47748 | DM Directory Manager Netwrix | 5.3 | May 28 | Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password |
| CVE-2025-48749 | DM Directory Manager Netwrix | 9.1 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data |
| CVE-2025-26818 | PS Password Secure Netwrix | 9.8 | Apr 3 | Netwrix Password Secure through 9.2 allows command injection |
| CVE-2025-26817 | PS Password Secure Netwrix | 9.8 | Apr 3 | Netwrix Password Secure 9.2.0.32454 allows OS command injection |
| CVE-2023-41264 | US Usercube Netwrix | 9.8 | Nov 28 | Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation |
| CVE-2022-31199 RansomwareIn wildKEV | AU Auditor Netwrix | 9.8 | Nov 8 | Netwrix Auditor Insecure Object Deserialization Vulnerability |
| CVE-2020-15931 | AL Account Lockout Examiner Netwrix | 7.5 | Oct 20 | Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured… |
| CVE-2019-14969 | AU Auditor Netwrix | 7.8 | Aug 12 | Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders |