GR
Product
Gravityzone
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 6Medium 1Low 0
Watch
Add Gravityzone to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3554 | 10.0 | Nov 24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the… Affected: before 6.24.1-1; 6.24.1-1 |
| CVE-2025-2244 | 9.8 | Apr 4 | A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without… Affected: before 6.41.2-1 |
| CVE-2024-6980 | 9.8 | Jul 31 | A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects… Affected: before 6.38.1-5 |
| CVE-2024-4177 | 9.8 | Jun 6 | A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery Affected: before 6.38.1-2 |
| CVE-2022-2830 | 9.8 | Sep 5 | Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the… Affected: before 6.27.2-2; before 6.29.2-1 |
| CVE-2021-3823 | 9.8 | Oct 28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute… Affected: before 3.3.8.249 |
| CVE-2017-8931 | 9.8 | Oct 30 | Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors Affected: before 6.2.1-35 |
| CVE-2018-8955 | 9.8 | Oct 24 | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2021-3960 | 7.8 | Dec 16 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute… Affected: before 3.3.8.272 |
| CVE-2022-0677 | 7.5 | Apr 7 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update… Affected: before 26.4-1 |
| CVE-2021-3959 | 7.5 | Dec 16 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: before 3.3.8.272 |
| CVE-2021-3553 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a… Affected: 6.24.1-1 |
| CVE-2021-3552 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: 6.24.1-1 |
| CVE-2025-2243 | 7.3 | Apr 4 | A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests Affected: before 6.41.2-1 |
| CVE-2021-3641 | 6.1 | Nov 9 | Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to… Affected: through 7.1.2.33 |
| CVE-2014-5350 | – | Aug 19 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) Affected: through 5.1.5.386 |
Showing 16