Vendors / Netwrix Records 17 All Threatist records
Exploited (KEV) 1
CVSS critical 6
CVSS high 2
Exploited now Netwrix records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00419 · Published 2025-05-29 · No fix listed CWE-798
Priority MEDIUM 42
Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data.
CVSS 3.1 CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00446 · Published 2025-05-28 · No fix listed CWE-201
Priority LOW 32
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00262 · Published 2025-08-07 · No fix listed CWE-89
Priority LOW 29
Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00281 · Published 2025-05-28 · No fix listed CWE-287
Priority LOW 27
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00278 · Published 2025-08-07 · No fix listed CWE-79
Priority LOW 27
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00376 · Published 2025-08-07 · No fix listed CWE-79
Priority LOW 26
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00266 · Published 2025-08-07 · No fix listed CWE-77
Priority LOW 24
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00317 · Published 2025-08-07 · No fix listed CWE-522
Priority LOW 24
Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00354 · Published 2025-05-28 · No fix listed CWE-259
Priority LOW 22
Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource.
CVSS 3.1 MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.0026 · Published 2025-05-28 · No fix listed CWE-732
Priority LOW 20
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0028 · Published 2025-08-07 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
6 2 9 0 0
THREATIST.IORead the docs