Netwrix vulnerabilities
We track 5 vulnerabilities in Netwrix products across 4 products. 5 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on June 27, 2024.
Latest Netwrix vulnerabilities
- 7.2 High severity
cososys_endpoint_protector: Improper Control of Generation of Code
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the Endpoint Protector and Unify agent in the way that the EasyLock dependency is acquired from the server. An attacker with admin
- 7.2 High severity
cososys_endpoint_protector: Improper Neutralization of Special Elements used in a Command
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the shadowing component of the Endpoint Protector and Unify agent which allows an attacker with administrative access to the Endpo
- 9.8 Critical severity
cososys_endpoint_protector: Logging of Excessive Data
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server application which allows an unauthenticated remote attacker to se
- 9.8 Critical severity
usercube: Improper Authentication
Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId
- 9.8 Critical severity
Netwrix Auditor Insecure Object Deserialization Exploited
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlyin