PatchTheCVEdirectory manager vulnerabilities and fixes
Recent CVEs affecting directory manager, with upgrade or downgrade steps. 11 tracked.
Also searched as: directorymanager.
directory manager has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-08-07. Highest priority: CVE-2025-48748 (score 49/100).
- CVE-2025-54397 MEDIUM 4.3 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Informati
- CVE-2025-54396 MEDIUM 5.4 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection
- CVE-2025-54395 MEDIUM 6.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticati
- CVE-2025-54394 MEDIUM 5.3 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protecte
- CVE-2025-54393 MEDIUM 5.4 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injectio
- CVE-2025-54392 MEDIUM 6.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticati
- CVE-2025-48749 CRITICAL 9.1 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sens
- CVE-2025-48748 CRITICAL 10.0 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.
- CVE-2025-48747 MEDIUM 5.0 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03
- CVE-2025-48746 MEDIUM 6.5 UPGRADE Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 l
- CVE-2025-47748 MEDIUM 5.3 UPGRADE Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.
FAQ
How do I fix directory manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is directory manager being exploited right now?
None of the tracked directory manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which directory manager CVE should I patch first?
CVE-2025-48748 currently ranks highest (49/100): Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password..