VE
Vendor
Versa-networks
27
CVEs
2
On KEV
0
New 30D
Products
VD10.0
Versa Director
Versa-networks
16 CVEs1 on KEV0 new
CO9.0
Concerto
Versa-networks
3 CVEs1 on KEV0 new
VO8.8
Versa Operating System
Versa-networks
4 CVEs0 on KEV0 new
VA7.8
Versa Analytics
Versa-networks
2 CVEs0 on KEV0 new
SC7.8
Sase Client
Versa-networks
1 CVEs0 on KEV0 new
SC7.8
SASE Client for Windows
Versa Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-34290 | SC SASE Client for Windows Versa Networks | 7.8 | Dec 20 | Versa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation |
| CVE-2025-24288 | VD Versa Director Versa-networks | 9.8 | Jun 18 | The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access)… |
| CVE-2025-24291 | VD Versa Director Versa-networks | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files |
| CVE-2025-23171 | VD Versa Director Versa-networks | 7.2 | Jun 18 | The Versa Director SD-WAN orchestration platform provides an option to upload various types of files |
| CVE-2025-23168 | VD Versa Director Versa-networks | 8.8 | Jun 18 | The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS |
| CVE-2025-23172 | VD Versa Director Versa-networks | 7.2 | Jun 18 | The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints |
| CVE-2025-23173 | VD Versa Director Versa-networks | 7.5 | Jun 18 | The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI |
| CVE-2025-23169 | VD Versa Director Versa-networks | 6.1 | Jun 18 | The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo |
| CVE-2025-23170 | VD Versa Director Versa-networks | 6.7 | Jun 18 | The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box |
| CVE-2025-34025 | CO Concerto Versa-networks | 8.8 | May 21 | Versa Concerto Insecure Docker Mount Container Escape |
| CVE-2025-34026 In wildKEV | CO Concerto Versa-networks | 7.5 | May 21 | Versa Concerto Actuator Authentication Bypass Information Leak |
| CVE-2025-34027 | CO Concerto Versa-networks | 9.0 | May 21 | Versa Concerto Authentication Bypass File Write Remote Code Execution |
| CVE-2024-42450 | VD Versa Director Versa-networks | 10.0 | Nov 19 | The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data |
| CVE-2024-45229 | VD Versa Director Versa-networks | 6.6 | Sep 20 | The Versa Director offers REST APIs for orchestration and management |
| CVE-2024-39717 In wildKEV | VD Versa Director Versa-networks | 7.2 | Aug 22 | Versa Director Dangerous File Type Upload Vulnerability |
| CVE-2021-39285 | VD Versa Director Versa-networks | 6.1 | Sep 7 | A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8 |
| CVE-2019-25030 | VD Versa Director Versa-networks | 5.5 | May 26 | In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage |
| CVE-2019-25029 | VD Versa Director Versa-networks | 9.8 | May 26 | In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application |
| CVE-2018-16499 | VO Versa Operating System Versa-networks | 5.9 | May 26 | In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks |
| CVE-2018-16498 | VD Versa Director Versa-networks | 5.5 | May 26 | In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files |
| CVE-2018-16497 | VA Versa Analytics Versa-networks | 7.8 | May 26 | In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server |
| CVE-2018-16496 | VD Versa Director Versa-networks | 5.3 | May 26 | In Versa Director, the un-authentication request found |
| CVE-2018-16495 | VO Versa Operating System Versa-networks | 8.8 | May 26 | In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application |
| CVE-2018-16494 | VO Versa Operating System Versa-networks | 8.8 | May 26 | In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary… |