Login Request a demo
DI
Product
Director
by Versa · last CVE Jun 18, 2025
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 5Medium 4Low 0
Severity
All severities12Critical3High5Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Director to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39717
In wildKEV
7.2
4%
Aug 22
Versa Director Dangerous File Type Upload Vulnerability
Affected: 21.2.2 through 21.2.2; 21.2.3 before 2024-06-21 before 21.2.3 before 2024-06-21; 22.1.1 through 22.1.1; 22.1.2 before 2024-06-21 through 22.1.2 before 2024-06-21; 22.1.3 before 2024-06-21 through 22.1.3 before 2024-06-21
CVE-2025-23168
8.8
0%
Jun 18
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23173
7.5
1%
Jun 18
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23171
7.2
1%
Jun 18
The Versa Director SD-WAN orchestration platform provides an option to upload various types of files
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23172
7.2
1%
Jun 18
The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
Showing 5