Login Request a demo
DI
Product
Director
by Versa · last CVE Jun 18, 2025
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 5Medium 4Low 0
Severity
All severities12Critical3High5Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Director to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39717
In wildKEV
7.2
4%
Aug 22
Versa Director Dangerous File Type Upload Vulnerability
Affected: 21.2.2 through 21.2.2; 21.2.3 before 2024-06-21 before 21.2.3 before 2024-06-21; 22.1.1 through 22.1.1; 22.1.2 before 2024-06-21 through 22.1.2 before 2024-06-21; 22.1.3 before 2024-06-21 through 22.1.3 before 2024-06-21
CVE-2024-42450
10.0
1%
Nov 19
The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data
Affected: 22.1.4 through 22.1.4
CVE-2025-24288
9.8
0%
Jun 18
The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access)…
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2024-45208
9.8
1%
Jun 18
The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23168
8.8
0%
Jun 18
The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23173
7.5
1%
Jun 18
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23171
7.2
1%
Jun 18
The Versa Director SD-WAN orchestration platform provides an option to upload various types of files
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23172
7.2
1%
Jun 18
The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23170
6.7
1%
Jun 18
The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2024-45229
6.6
1%
Sep 20
The Versa Director offers REST APIs for orchestration and management
Affected: 22.1.4 20240909 before 22.1.4 20240909; 22.1.3 20240909 before 22.1.3 20240909; 22.1.2 20240909 before 22.1.2 20240909; 22.1.1 20240909 before 22.1.1 20240909; 21.2.3 20240909 before 21.2.3 20240909; 21.2.2 20240909 before 21.2.2 20240909
CVE-2025-24291
6.1
0%
Jun 18
The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
CVE-2025-23169
6.1
0%
Jun 18
The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo
Affected: 21.2.2 through 21.2.2; 21.2.3 through 21.2.3; 22.1.1 through 22.1.1; 22.1.2 through 22.1.2; 22.1.3 through 22.1.3; 22.1.4 through 22.1.4
Showing 12