Netwrix

Records17All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Netwrix records in CISA KEV

TI-2022-13239 Netwrix Auditor Insecure Object Deserialization Vulnerability CRITICAL 100KEV 2023-07-11

Components

Products in the NVD configurations · select one to filter the records

Directory Manager 11 records MEDIUM Auditor 2 records CRITICAL Password Secure 2 records MEDIUM Account Lockout Examiner 1 record LOW Usercube 1 record MEDIUM

Records

2 records in Auditor · all components

TI-2022-13239 CVE-2022-31199 · GHSA-c3rc-wfgg-r544

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video…

CRITICAL 100KEV

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36009 Published 2022-11-08 No fix listed CWE-502

TI-2019-11164 CVE-2019-14969 · GHSA-8vm9-2jxc-4h6c

Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix…

LOW 34

Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00466 Published 2019-08-12 No fix listed CWE-732

Open these records in search →

Critical	6
High	2
Medium	9
Low	0
No CVSS	0