PatchTheCVE: netwrixhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-54397: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Informatihttps://patchthecve.com/cve/CVE-2025-54397.htmlhttps://patchthecve.com/cve/CVE-2025-54397.htmlWed, 17 Jun 2026 09:40:01 +0000MEDIUM 4.3: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users.CVE-2025-54396: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injectionhttps://patchthecve.com/cve/CVE-2025-54396.htmlhttps://patchthecve.com/cve/CVE-2025-54396.htmlWed, 17 Jun 2026 09:40:01 +0000MEDIUM 5.4: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this.CVE-2025-54395: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticatihttps://patchthecve.com/cve/CVE-2025-54395.htmlhttps://patchthecve.com/cve/CVE-2025-54395.htmlWed, 17 Jun 2026 09:40:01 +0000MEDIUM 6.1: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.CVE-2025-54394: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protectehttps://patchthecve.com/cve/CVE-2025-54394.htmlhttps://patchthecve.com/cve/CVE-2025-54394.htmlWed, 17 Jun 2026 09:40:00 +0000MEDIUM 5.3: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.CVE-2025-54393: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injectiohttps://patchthecve.com/cve/CVE-2025-54393.htmlhttps://patchthecve.com/cve/CVE-2025-54393.htmlWed, 17 Jun 2026 09:40:00 +0000MEDIUM 5.4: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access.CVE-2025-54392: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authenticatihttps://patchthecve.com/cve/CVE-2025-54392.htmlhttps://patchthecve.com/cve/CVE-2025-54392.htmlWed, 17 Jun 2026 09:40:00 +0000MEDIUM 6.1: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189.CVE-2025-48748: Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.https://patchthecve.com/cve/CVE-2025-48748.htmlhttps://patchthecve.com/cve/CVE-2025-48748.htmlWed, 17 Jun 2026 09:30:16 +0000CRITICAL 10.0: Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.CVE-2025-48749: Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Senshttps://patchthecve.com/cve/CVE-2025-48749.htmlhttps://patchthecve.com/cve/CVE-2025-48749.htmlWed, 17 Jun 2026 09:30:16 +0000CRITICAL 9.1: Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data.CVE-2025-48747: Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03https://patchthecve.com/cve/CVE-2025-48747.htmlhttps://patchthecve.com/cve/CVE-2025-48747.htmlWed, 17 Jun 2026 09:30:16 +0000MEDIUM 5.0: Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource.CVE-2025-47748: Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.https://patchthecve.com/cve/CVE-2025-47748.htmlhttps://patchthecve.com/cve/CVE-2025-47748.htmlWed, 17 Jun 2026 09:28:37 +0000MEDIUM 5.3: Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.CVE-2025-48746: Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lhttps://patchthecve.com/cve/CVE-2025-48746.htmlhttps://patchthecve.com/cve/CVE-2025-48746.htmlWed, 17 Jun 2026 09:30:15 +0000MEDIUM 6.5: Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function.CVE-2025-26818: Netwrix Password Secure through 9.2 allows command injection.https://patchthecve.com/cve/CVE-2025-26818.htmlhttps://patchthecve.com/cve/CVE-2025-26818.htmlWed, 17 Jun 2026 09:02:27 +0000CRITICAL 9.8: Netwrix Password Secure through 9.2 allows command injection.CVE-2025-26817: Netwrix Password Secure 9.2.0.32454 allows OS command injection.https://patchthecve.com/cve/CVE-2025-26817.htmlhttps://patchthecve.com/cve/CVE-2025-26817.htmlWed, 17 Jun 2026 09:02:27 +0000CRITICAL 9.8: Netwrix Password Secure 9.2.0.32454 allows OS command injection.