GR
Product
Gravityzone
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 6Medium 1Low 0
Watch
Add Gravityzone to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3960 | 7.8 | Dec 16 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute… Affected: before 3.3.8.272 |
| CVE-2022-0677 | 7.5 | Apr 7 | Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update… Affected: before 26.4-1 |
| CVE-2021-3959 | 7.5 | Dec 16 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: before 3.3.8.272 |
| CVE-2021-3553 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a… Affected: 6.24.1-1 |
| CVE-2021-3552 | 7.5 | Nov 24 | A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay… Affected: 6.24.1-1 |
| CVE-2025-2243 | 7.3 | Apr 4 | A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests Affected: before 6.41.2-1 |
Showing 6