GR
Product
Gravityzone
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 6Medium 1Low 0
Watch
Add Gravityzone to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3554 | 10.0 | Nov 24 | Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the… Affected: before 6.24.1-1; 6.24.1-1 |
| CVE-2025-2244 | 9.8 | Apr 4 | A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without… Affected: before 6.41.2-1 |
| CVE-2024-6980 | 9.8 | Jul 31 | A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects… Affected: before 6.38.1-5 |
| CVE-2024-4177 | 9.8 | Jun 6 | A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery Affected: before 6.38.1-2 |
| CVE-2022-2830 | 9.8 | Sep 5 | Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the… Affected: before 6.27.2-2; before 6.29.2-1 |
| CVE-2021-3823 | 9.8 | Oct 28 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute… Affected: before 3.3.8.249 |
| CVE-2017-8931 | 9.8 | Oct 30 | Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors Affected: before 6.2.1-35 |
| CVE-2018-8955 | 9.8 | Oct 24 | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute… Affected: All versions, or not specified |
Showing 8