CVE-2025-48746
MEDIUMNetwrix Directory Manager <11.1.25134.03 - Info Disclosure
Title source: llmDescription
Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function.
References (2)
Core 2
Core References
Vendor Advisory
https://community.netwrix.com/t/adv-2025-014-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/13951
Product
https://netwrix.com
Scores
CVSS v3
6.5
EPSS
0.0024
EPSS Percentile
15.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-287
Status
published
Products (1)
netwrix/directory_manager
< 11.0.0.0
Published
May 28, 2025
Tracked Since
Feb 18, 2026