versa director vulnerabilities and fixes

Recent CVEs affecting versa director, with upgrade or downgrade steps. 3 tracked.

Also searched as: versadirector.

versa director has 3 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2024-11-19. Highest priority: CVE-2024-39717 (score 73/100).

• CVE-2024-42450 CRITICAL 10.0 DOWNGRADE The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data
• CVE-2024-45229 MEDIUM 6.6 DOWNGRADE The Versa Director offers REST APIs for orchestration and management
• CVE-2024-39717 HIGH 7.2 EXPLOITED DOWNGRADE Versa Director Dangerous File Type Upload Vulnerability

FAQ

How do I fix versa director vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is versa director being exploited right now?

Yes: 1 versa director CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which versa director CVE should I patch first?

CVE-2024-39717 currently ranks highest (73/100): Versa Director Dangerous File Type Upload Vulnerability.

RSS feed for versa director · ← Back to latest CVEs