ES
Product
Endpoint Security Tools
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 2Low 1
Watch
Add Endpoint Security Tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3554 | 10.0 | Nov 24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the… Affected: before 6.6.27.390; before 6.6.27.390; 7.0.0.00 before 7.1.2.33 |
| CVE-2025-7073 | 7.8 | Dec 10 | A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges Affected: before 7.9.20.515 |
| CVE-2021-4199 | 7.8 | Mar 7 | Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security,… Affected: before 7.4.3.146 |
| CVE-2021-3579 | 7.8 | Oct 28 | Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total… Affected: before 7.2.1.65 |
| CVE-2021-3576 | 7.8 | Oct 28 | Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System Affected: before 7.2.1.65 |
| CVE-2020-8097 | 7.8 | Aug 30 | An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an unprivileged local attacker to escalate… Affected: before 6.6.18.261 |
| CVE-2019-17099 | 7.8 | Jan 27 | An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary… Affected: before 6.6.11.163 |
| CVE-2022-0677 | 7.5 | Apr 7 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update… Affected: before 6.2.21.171; before 7.4.1.111 |
| CVE-2021-3553 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a… Affected: before 6.2.21.160; 6.6.27.0 before 6.6.27.390; 7.0.0.00 before 7.1.2.33 |
| CVE-2021-3552 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: before 6.2.21.160; 6.6.27.0 before 6.6.27.390; 7.0.0.00 before 7.1.2.33 |
| CVE-2021-3485 | 6.6 | May 24 | An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the… Affected: before 6.2.21.155 |
| CVE-2021-4198 | 6.1 | Mar 7 | A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN… Affected: before 7.2.2.92 |
| CVE-2020-15279 | 3.3 | May 18 | An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn… Affected: before 6.6.23.320 |
Showing 13