Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.1

Netwrix Directory Manager: Authentication XSS Risk

CVE-2025-54395 · published 1 year ago
Summary

The Netwrix Directory Manager has a security risk that allows an attacker to inject malicious code through the authentication configuration data. This could allow an attacker to gain unauthorized access to the system or take other malicious actions. Netwrix recommends updating to the latest version, 11.1.25162.02, to fix this issue.

What to do
  • Update netwrix directory_manager to version 11.1.25162.02 or later.
Affected software
VendorProductAffected versions
netwrix directory_manager >= 11.0.0.0, < 11.1.25162.02
cpe:2.3:a:netwrix:directory_manager:*:*:*:*:*:*:*:*
Original advisory text
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.1 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published7 Aug 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-54395 · NVD
Track software like this
Free during beta