CVE-2025-47748

Netwrix Directory Manager is affected by a vulnerability where a hardcoded password exists within the software. This issue impacts versions v.11.0.0.0 and earlier , as well as versions later than v.11.1.25134.03 . The presence of hardcoded credentials can allow unauthorized access to the system. ...

CVE-2025-48748

Netwrix Directory Manager (formerly Imanami GroupID ) versions through v.10.0.7784.0 are vulnerable to a security issue caused by the use of hard-coded passwords . This vulnerability (mapped to CWE-798 ) allows for potential unauthorized access. To resolve this issue, users are recommended to upd...

CVE-2025-48749

The group and user management software Netwrix Directory Manager (formerly Imanami GroupID) is vulnerable to the insertion of sensitive information into sent data . This issue affects versions v11.0.0.0 and before , as well as versions after v11.1.25134.03 . The vulnerability allows for the poten...

CVE-2025-48746

Netwrix Directory Manager (formerly Imanami GroupID) is affected by a vulnerability where a critical function lacks authentication . This flaw impacts versions 11.0.0.0 and earlier , as well as versions after 11.1.25134.03 . While the technical root cause is identified as improper authentication,...

CVE-2025-48747

The software Netwrix Directory Manager (formerly Imanami GroupID ) is affected by a vulnerability involving Incorrect Permission Assignment for a Critical Resource . This flaw impacts versions before and including v.11.0.0.0 and versions after v.11.1.25134.03 . The root cause is identified as the...

CVE-2025-54393

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a Static Code Injection flaw. This vulnerability allows authenticated users to potentially escalate privileges and obtain administrative access . To remediate this issue, users should up...

CVE-2025-54395

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a cross-site scripting (XSS) flaw. The vulnerability specifically affects the handling of authentication configuration data , allowing for the execution of malicious scripts. To remediat...

CVE-2025-54397

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25161.02 are vulnerable to a flaw where the software inserts sensitive information into sent data provided to authenticated users. The root cause is attributed to improper access control (CWE-284). To remediate th...

CVE-2025-54396

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are vulnerable to a SQL Injection security issue. Authenticated users can exploit this vulnerability to perform unauthorized actions against the database. To mitigate this risk, users are recommended to u...

CVE-2025-54392

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.02 are susceptible to a Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, specifically regarding authentication error data . This vu...

CVE-2025-54394

Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 through 11.1.25162.01 are vulnerable to insufficiently protected credentials when the software processes requests for remote Excel resources . This vulnerability allows for potential unauthorized access to credentials. Remedia...