NE
Vendor
Netwrix
25
CVEs
1
On KEV
0
New 30D
Products
AU9.8
Auditor
Netwrix
2 CVEs1 on KEV0 new
DM10.0
Directory Manager
Netwrix
11 CVEs0 on KEV0 new
CU9.8
Cososys Unify
Netwrix
4 CVEs0 on KEV0 new
CE9.8
Cososys Endpoint Protector
Netwrix
3 CVEs0 on KEV0 new
PS9.8
Password Secure
Netwrix
2 CVEs0 on KEV0 new
AL7.5
Account Lockout Examiner
Netwrix
1 CVEs0 on KEV0 new
CE6.5
Cososys Endpoint
Netwrix
1 CVEs0 on KEV0 new
US9.8
Usercube
Netwrix
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54395 | DM Directory Manager Netwrix | 6.1 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data |
| CVE-2025-54397 | DM Directory Manager Netwrix | 4.3 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users |
| CVE-2025-54396 | DM Directory Manager Netwrix | 5.4 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection |
| CVE-2025-54392 | DM Directory Manager Netwrix | 6.1 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189 |
| CVE-2025-54394 | DM Directory Manager Netwrix | 5.3 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources |
| CVE-2025-54393 | DM Directory Manager Netwrix | 5.4 | Aug 7 | Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection |
| CVE-2025-48748 | DM Directory Manager Netwrix | 10.0 | May 29 | Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password |
| CVE-2025-48746 | DM Directory Manager Netwrix | 6.5 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function |
| CVE-2025-47748 | DM Directory Manager Netwrix | 5.3 | May 28 | Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password |
| CVE-2025-48747 | DM Directory Manager Netwrix | 5.0 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource |
| CVE-2025-48749 | DM Directory Manager Netwrix | 9.1 | May 28 | Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data |
| CVE-2025-26818 | PS Password Secure Netwrix | 9.8 | Apr 3 | Netwrix Password Secure through 9.2 allows command injection |
| CVE-2025-26817 | PS Password Secure Netwrix | 9.8 | Apr 3 | Netwrix Password Secure 9.2.0.32454 allows OS command injection |
| CVE-2024-36072 | CE Cososys Endpoint Protector Netwrix | 9.8 | Jun 27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector… |
| CVE-2024-36075 | CE Cososys Endpoint Netwrix | 6.5 | Jun 27 | The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the… |
| CVE-2024-36074 | CE Cososys Endpoint Protector Netwrix | 7.2 | Jun 27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way… |
| CVE-2024-36073 | CU Cososys Unify Netwrix | 7.2 | Jun 27 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector… |
| CVE-2023-41264 | US Usercube Netwrix | 9.8 | Nov 28 | Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation |
| CVE-2022-31199 RansomwareIn wildKEV | AU Auditor Netwrix | 9.8 | Nov 8 | Netwrix Auditor Insecure Object Deserialization Vulnerability |
| CVE-2020-15931 | AL Account Lockout Examiner Netwrix | 7.5 | Oct 20 | Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured… |
| CVE-2019-14969 | AU Auditor Netwrix | 7.8 | Aug 12 | Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders |