PT-2025-32281 · Netwrix · Netwrix Directory Manager

Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager versions 11.0.0.0 through 11.1.25162.02 Description: The software contains a cross-site scripting XSS issue affecting authentication configuration data. Recommendations: Update Netwrix Directory Manager to version...

CVE-2025-54396

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a SQL Injection security issue. Authenticated users can exploit this vulnerability to perform unauthorized actions against the database. To mitigate this risk, users are recommended to u...

CVE-2025-54394

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.01 are vulnerable to insufficiently protected credentials when the software processes requests for remote Excel resources . This vulnerability allows for potential unauthorized access to credentials. Remedia...

CVE-2025-54393

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a Static Code Injection flaw. This vulnerability allows authenticated users to potentially escalate privileges and obtain administrative access . To remediate this issue, users should up...

CVE-2025-54395

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a cross-site scripting (XSS) flaw. The vulnerability specifically affects the handling of authentication configuration data , allowing for the execution of malicious scripts. To remediat...

CVE-2025-54397

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25161.02 are vulnerable to a flaw where the software inserts sensitive information into sent data provided to authenticated users. The root cause is attributed to improper access control (CWE-284). To remediate th...

Netwrix Directory Manager security vulnerabilities

Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02 that stems from the vulnerability of authentication configuration data to cross-site scripting attacks...

CVE-2025-54392

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are susceptible to a Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, specifically regarding authentication error data . This vu...

CVE-2025-54396

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this...

PT-2025-32278 · Imanami +1 · Groupid +1

Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager formerly Imanami GroupID versions 11.0.0.0 through 11.1.25162.02 Description: The software contains a cross-site scripting XSS issue related to authentication error data. Recommendations: Update Netwrix Directory...

Netwrix Directory Manager security vulnerabilities

Netwrix Directory Manager is a group and user management software from Netwrix, Inc. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02, which stems from insufficient credential protection for remote Excel resources...

Netwrix Directory Manager security vulnerabilities

Netwrix Directory Manager is a group and user management software from Netwrix, Inc. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02, which originates from sensitive information contained in data sent to authenticated users...

Netwrix Directory Manager security vulnerabilities

Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02 that stems from vulnerability to SQL injection attacks...

CVE-2025-54394

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources...

CVE-2025-54395

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data...

Netwrix Directory Manager security vulnerabilities

Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02, which stems from a static code injection vulnerability that could lead to elevation of privilege...

CVE-2025-54397: Improper Access Control

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users...

CVE-2025-54394: Insufficiently Protected Credentials

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources...

CVE-2025-54393: Improper Neutralization of Special Elements used in a Command

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access...

CVE-2025-54396: Improper Neutralization of Special Elements used in an SQL Command

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this...