<Past |
Future> |
98.x |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
100.x |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
104.x |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Approved w/Constraints [1, 3, 5, 7] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
131.x |
Unapproved |
Unapproved |
Unapproved |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
132.x |
Unapproved |
Unapproved |
Unapproved |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
133.x |
Unapproved |
Unapproved |
Unapproved |
Authorized w/ Constraints [3, 5, 7, 8, 9] |
Authorized w/ Constraints [3, 5, 7, 8, 9] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
134.x |
Unapproved |
Unapproved |
Unapproved |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (DIVEST) [3, 5, 7, 9, 10] |
Authorized w/ Constraints (POA&M) |
135.x |
Unapproved |
Unapproved |
Unapproved |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints (POA&M) |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Authorized w/ Constraints [3, 5, 7, 9, 10] |
Note: |
At the time of writing, version 135.0.3179.98 is the most current version, released 04/24/2025. |
| | [1] | If free trialware is utilized, the software must be purchased or removed at the end of the trial period.
Per the Microsoft Edge WedDriver Initial Product Review, users must abide by the following constraints:
- Microsoft Edge WebDriver will require a 3rd party FIPS 140-2 certified solution for any data containing PHI/PII or VA sensitive information where applicable.
- System Owners/Administrators will need to monitor active CVE entries for Selenium and Python and ensure installed versions of the application are on the authorized list on the One-VA TRM.
The product or technology must remain patched and operated in accordance with Federal and Department security and privacy policies and guidelines. The TRM Decision Matrix displays the current and future VA IT position regarding different releases of a TRM entry. The consumer of this information has the responsibility to consult the organizations responsible for the development, preproduction and/or production environments to ensure that the target version of the technology will be supported. Any major/minor version, that is not listed in the TRM Decision Matrix, is considered unapproved for use.
It is a requirement that VA sensitive data be properly protected in accordance with VA Handbook 6500, Federal Information Security Management Act (FISMA), and Federal Information Processing Standards (FIPS) 140-2. | | [3] | Technology must remain patched and operated in accordance with Federal and Department security policies and guidelines in order to mitigate known and future security vulnerabilities. | | [5] | Users should check with their supervisor, Information System Security Officer (ISSO) or local OIT representative for permission to download and use this software. Downloaded software must always be scanned for viruses prior to installation to prevent adware or malware. Freeware may only be downloaded directly from the primary site that the creator of the software has advertised for public download and user or development community engagement. Users should note, any attempt by the installation process to install any additional, unrelated software is not authorized and the user should take the proper steps to decline those installations. | | [7] | Veterans Affairs (VA) users must ensure VA sensitive data is properly protected in compliance with all VA regulations. All instances of deployment using this technology should be reviewed by the local ISSO (Information System Security Officer) to ensure compliance with both VA Handbook 6500 and VA Directive 6500. | | [8] | Per the Initial Product Review, users must abide by the following constraints:
- Microsoft Edge WebDriver will require a 3rd party FIPS 140-2 (or its successor)
certified solution for any data containing PHI/PII or VA sensitive information.
- System owners should use the latest versions of these products and monitor
both the CVE Details and NIST National Vulnerability Database websites for
any new security vulnerabilities.
- Users should follow vendor published instructions to turn off diagnostic data
collection for Microsoft Edge WebDriver.
Users must ensure that Microsoft Edge is implemented with VA-approved baselines. (Refer to the ‘Category’ tab under ‘Runtime Dependencies’) | | [9] | The Federal Information Processing standards (FIPS) 140-2 certification status of this technology was not able to be verified. This technology will require a 3rd party FIPS 140-2 or 140-3 certified solution for any data containing PHI/PII or VA sensitive information, where applicable. More information regarding the Cryptographic Module Validation Program (CMVP) can be found on the NIST website. | | [10] | Per the Initial Product Review, users must abide by the following constraints:
- Microsoft Edge WebDriver is not Federal Information Processing Standards (FIPS) 140-2 (or its successor) certified.
Microsoft Edge WebDriver will require a 3rd party FIPS 140-2 (or its successor) certified solution for any data containing PHI/PII or VA sensitive information.
- Microsoft Edge Webdriver can use Selenium for a testing framework which also requires the use of Python. Selenium and Python both have multiple published vulnerabilities. System owners should use the latest versions of these products and monitor both the CVE Details and NIST National Vulnerability Database websites for any new security vulnerabilities.
- By default, Microsoft Edge WebDriver sends diagnostic data such as the status of the New Session WebDriver command to Microsoft. Users should follow vendor published instructions to turn off diagnostic data
collection for Microsoft Edge WebDriver.
Users must ensure that Microsoft Edge is implemented with VA-approved baselines. (Refer to the ‘Category’ tab under ‘Runtime Dependencies’) |
|