Bitdefender Gravityzone
16 CVEs affecting Bitdefender Gravityzone. Latest disclosed: 2025-04-04. Critical: 5, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2244 | Critical | 9.8 | 2025-04-04 | A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-suppli… |
CVE-2024-6980 | Critical | 9.8 | 2024-07-31 | A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. Thi… |
CVE-2017-8931 | Critical | 9.8 | 2018-10-30 | Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors. |
CVE-2018-8955 | Critical | 9.8 | 2018-10-24 | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attacke… |
CVE-2021-3554 | Critical | 9.0 | 2021-11-24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attack… |
CVE-2022-2830 | High | 8.8 | 2022-09-05 | Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe comman… |
CVE-2024-4177 | High | 8.1 | 2024-06-06 | A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This… |
CVE-2022-0677 | High | 7.5 | 2022-04-07 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), Gravit… |
CVE-2025-2243 | High | 7.3 | 2025-04-04 | A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading charact… |
CVE-2021-3960 | High | 7.1 | 2021-12-16 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an… |
CVE-2021-3823 | High | 7.1 | 2021-10-28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an… |
CVE-2021-3959 | Medium | 6.8 | 2021-12-16 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy request… |
CVE-2021-3641 | Medium | 6.1 | 2021-11-09 | Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a… |
CVE-2021-3553 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protec… |
CVE-2021-3552 | Medium | 5.3 | 2021-11-24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy request… |
CVE-2014-5350 | | 2014-08-19 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot)… |