225 matches found
CVE-2025-48747: Incorrect Permission Assignment for Critical Resource
Netwrix Directory Manager formerly Imanami GroupID before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource...
CVE-2025-47748: Use of Hard-coded Password
Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password...
CVE-2025-47748
Netwrix Directory Manager is affected by a vulnerability where a hardcoded password exists within the software. This issue impacts versions v.11.0.0.0 and earlier , as well as versions later than v.11.1.25134.03 . The presence of hardcoded credentials can allow unauthorized access to the system. ...
CVE-2025-48747
Netwrix Directory Manager formerly Imanami GroupID before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource...
CVE-2025-48749
Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...
CVE-2025-48747
Netwrix Directory Manager formerly Imanami GroupID before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource...
CVE-2025-48746
Netwrix Directory Manager formerly Imanami GroupID v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function...
CVE-2025-47748
Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password...
CVE-2025-48749: Insertion of Sensitive Information Into Sent Data
Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...
CVE-2024-36074
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with administrative access to the Endpoint...
CVE-2019-14969
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService which writes to that directory does not perform proper impersonation, and thus the target file will have the same...
CVE-2025-26817
Netwrix Password Secure 9.2.0.32454 allows OS command injection...
CVE-2025-26818
Netwrix Password Secure through 9.2 allows command injection...
CVE-2025-26818
Netwrix Password Secure through 9.2 allows command injection...
CVE-2025-26817
Netwrix Password Secure 9.2.0.32454 allows OS command injection...
CVE-2025-26818
Netwrix Password Secure through 9.2 allows command injection...
CVE-2025-26817
Netwrix Password Secure 9.2.0.32454 allows OS command injection...
CVE-2025-26818: Improper Control of Generation of Code
Netwrix Password Secure through 9.2 allows command injection...