VE
Vendor
Versa
15
CVEs
2
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-24288 | DI Director Versa | 9.8 | Jun 18 | The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access)… |
| CVE-2025-24291 | DI Director Versa | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files |
| CVE-2024-45208 | DI Director Versa | 9.8 | Jun 18 | The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service |
| CVE-2025-23171 | DI Director Versa | 7.2 | Jun 18 | The Versa Director SD-WAN orchestration platform provides an option to upload various types of files |
| CVE-2025-23168 | DI Director Versa | 8.8 | Jun 18 | The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS |
| CVE-2025-23172 | DI Director Versa | 7.2 | Jun 18 | The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints |
| CVE-2025-23173 | DI Director Versa | 7.5 | Jun 18 | The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI |
| CVE-2025-23169 | DI Director Versa | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo |
| CVE-2025-23170 | DI Director Versa | 6.7 | Jun 18 | The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box |
| CVE-2025-34025 | CO Concerto Versa | 8.8 | May 21 | Versa Concerto Insecure Docker Mount Container Escape |
| CVE-2025-34026 In wildKEV | CO Concerto Versa | 7.5 | May 21 | Versa Concerto Actuator Authentication Bypass Information Leak |
| CVE-2025-34027 | CO Concerto Versa | 9.0 | May 21 | Versa Concerto Authentication Bypass File Write Remote Code Execution |
| CVE-2024-42450 | DI Director Versa | 10.0 | Nov 19 | The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data |
| CVE-2024-45229 | DI Director Versa | 6.6 | Sep 20 | The Versa Director offers REST APIs for orchestration and management |
| CVE-2024-39717 In wildKEV | DI Director Versa | 7.2 | Aug 22 | Versa Director Dangerous File Type Upload Vulnerability |