VD
Product
Versa Director
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 5Medium 8Low 0
Watch
Add Versa Director to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23170 | 6.7 | Jun 18 | The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box Affected: 21.2.2; 21.2.3; 22.1.1; 22.1.2; 22.1.3; 22.1.4 |
| CVE-2024-45229 | 6.6 | Sep 20 | The Versa Director offers REST APIs for orchestration and management Affected: 21.2.2; 21.2.3; 22.1.1; 22.1.2; 22.1.3; 22.1.4 |
| CVE-2025-24291 | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files Affected: 21.2.2; 21.2.3; 22.1.1; 22.1.2; 22.1.3; 22.1.4 |
| CVE-2025-23169 | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo Affected: 21.2.2; 21.2.3; 22.1.1; 22.1.2; 22.1.3; 22.1.4 |
| CVE-2021-39285 | 6.1 | Sep 7 | A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8 Affected: 16.1r2 |
| CVE-2019-25030 | 5.5 | May 26 | In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage Affected: All versions, or not specified |
| CVE-2018-16498 | 5.5 | May 26 | In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files Affected: All versions, or not specified |
| CVE-2018-16496 | 5.3 | May 26 | In Versa Director, the un-authentication request found Affected: All versions, or not specified |
Showing 8