What is CVE-2025-2243?

CVE-2025-2243 is a high-severity vulnerability in Bitdefender Gravityzone, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.3/10. Published 2025-04-04.

How severe is CVE-2025-2243?

High severity. CVSS v3 base score is 7.3 out of 10.

SSRF in Bitdefender Gravityzone

CVE-2025-2243

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass co…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Bitdefender Gravityzone
Bitdefender Gravityzone Console — versions 0

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

cve-requests@bitdefender.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-2243?: CVE-2025-2243 is a high-severity vulnerability in Bitdefender Gravityzone, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.3/10. Published 2025-04-04.
How severe is CVE-2025-2243?: High severity. CVSS v3 base score is 7.3 out of 10.