CVE Tools
Track your stack

Netwrix

11 CVEs tracked since 2025. Since May 2025, none of them reached CISA KEV.

Netwrix CVEs per month

May 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Netwrix CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0550
2025-064 or fewer
2025-075 or fewer
2025-0860
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Netwrix's monthly top three, with their CVEs summed over those months.

  1. Directory Manager112 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Netwrix.

  1. CVE-2025-54396Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this.5.4
  2. CVE-2025-54397Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users.4.3
  3. CVE-2025-54395Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.6.1
  4. CVE-2025-54392Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189.6.1
  5. CVE-2025-54394Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.5.3
  6. CVE-2025-54393Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access.5.4
  7. CVE-2025-48748Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.10.0
  8. CVE-2025-47748Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.5.3
  9. CVE-2025-48747Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource.5.0
  10. CVE-2025-48746Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function.6.5
  11. CVE-2025-48749Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data.9.1
  12. CVE-2025-26817Netwrix Password Secure 9.2.0.32454 allows OS command injection.9.8
  13. CVE-2025-26818Netwrix Password Secure through 9.2 allows command injection.9.8
  14. CVE-2023-41264Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the c...9.8
  15. CVE-2022-31199Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The r...9.8

The record

Peak rank
#141 in Aug 2025
Busiest month shown
Aug 2025, 6 CVEs
Months with a KEV entry
0 since May 2025
Monthly snapshots
2 since 2025
Netwrix's full record, month by month