Skip to content
OpenAdvisories

Product · Bitdefender

GravityZone

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2021-3959

    Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

    A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3…

    Bitdefender GravityZone
  • Medium 5.3
    CVE-2021-3553

    Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)

    A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools v…

    Bitdefender GravityZone Endpoint Security Tools Unified Endpoint for Linux Linux
  • Medium 5.3
    CVE-2021-3552

    Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)

    A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6…

    Bitdefender GravityZone Endpoint Security Tools
  • Medium 6.1
    CVE-2021-3641

    Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

    Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1…

    Bitdefender GravityZone