Skip to content
Noroxi

versa-networks records

24 published records for vendor versa-networks.

Researcher profile

Entered KEV
2 · 8.3%
Weaponized
2 · 8.3%
Pre-auth RCE
3
With a fix record
4.2%
Median publish → KEV
124 days

Records by year

  1. 21
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2025-34026
    91Now

    Versa Concerto Actuator Authentication Bypass Information Leak

    CriticalCVSS 9.2KEVWeaponizedEPSS 81%

    versa-networks · concertoMay 21, 2025

  • CVE-2024-39717
    59Plan

    The Versa Director GUI provides an option to customize the look and feel of the user interface.

    HighCVSS 7.2KEVWeaponizedEPSS 3%

    versa-networks · versa directorAug 22, 2024

  • CVE-2025-34027
    54Plan

    Versa Concerto Authentication Bypass File Write Remote Code Execution

    CriticalCVSS 10.0Proof of conceptEPSS 46%

    versa-networks · concertoMay 21, 2025

  • CVE-2019-25029
    40Plan

    In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via

    CriticalCVSS 9.8No exploitEPSS 2%

    versa-networks · versa directorMay 26, 2021

  • CVE-2024-42450
    40Plan

    The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data.

    CriticalCVSS 10.0No exploitEPSS 0%

    versa-networks · versa directorNov 19, 2024

  • CVE-2025-24288
    39Monitor

    The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and mult

    CriticalCVSS 9.8No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2018-16494
    36Monitor

    In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissi

    HighCVSS 8.8No exploitEPSS 1%

    versa-networks · versa operating systemMay 26, 2021

  • CVE-2018-16495
    35Monitor

    In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user suc

    HighCVSS 8.8No exploitEPSS 0%

    versa-networks · versa operating systemMay 26, 2021

  • CVE-2025-23168
    35Monitor

    The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via ema

    HighCVSS 8.8No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2025-34025
    34Monitor

    Versa Concerto Insecure Docker Mount Container Escape

    HighCVSS 8.6No exploitEPSS 0%

    versa-networks · concertoMay 21, 2025

  • CVE-2025-34290
    34Monitor

    Versa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation

    HighCVSS 8.5No exploitEPSS 0%

    versa-networks · sase clientDec 20, 2025

  • CVE-2018-16497
    31Monitor

    In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server.

    HighCVSS 7.8No exploitEPSS 0%

    versa-networks · versa analyticsMay 26, 2021

  • CVE-2025-23173
    30Monitor

    The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI.

    HighCVSS 7.5No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2025-23172
    28Monitor

    The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints.

    HighCVSS 7.2No exploitEPSS 1%

    versa-networks · versa directorJun 18, 2025

  • CVE-2025-23171
    28Monitor

    The Versa Director SD-WAN orchestration platform provides an option to upload various types of files.

    HighCVSS 7.2No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2025-23170
    26Monitor

    The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via S

    MediumCVSS 6.7No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2024-45229
    26Monitor

    The Versa Director offers REST APIs for orchestration and management.

    MediumCVSS 6.6No exploitEPSS 0%

    versa-networks · versa directorSep 20, 2024

  • CVE-2021-39285
    24Monitor

    A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8.

    MediumCVSS 6.1No exploitEPSS 0%

    versa-networks · versa directorSep 7, 2021

  • CVE-2025-23169
    24Monitor

    The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo.

    MediumCVSS 6.1No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2025-24291
    24Monitor

    The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files.

    MediumCVSS 6.1No exploitEPSS 0%

    versa-networks · versa directorJun 18, 2025

  • CVE-2018-16499
    23Monitor

    In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man

    MediumCVSS 5.9No exploitEPSS 0%

    versa-networks · versa operating systemMay 26, 2021

  • CVE-2019-25030
    22Monitor

    In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation functio

    MediumCVSS 5.5No exploitEPSS 0%

    versa-networks · versa analyticsMay 26, 2021

  • CVE-2018-16498
    22Monitor

    In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files.

    MediumCVSS 5.5No exploitEPSS 0%

    versa-networks · versa directorMay 26, 2021

  • CVE-2018-16496
    21Monitor

    In Versa Director, the un-authentication request found.

    MediumCVSS 5.3No exploitEPSS 0%

    versa-networks · versa directorMay 26, 2021