CVE-2025-2244

< 6.41.2-1

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses

9.8CRITICAL

CVE-2025-2243

< 6.41.2-1

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validatio

7.3HIGH

CVE-2024-6980

< 6.38.1-5

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a ser

9.8CRITICAL

CVE-2024-4177

< 6.38.1-2

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a serv

8.1HIGH

CVE-2022-2830

< 6.27.2-2

Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an a

8.8HIGH

CVE-2022-0677

< 26.4-1

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security

7.5HIGH

CVE-2021-3960

< 3.3.8.272

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitd

7.1HIGH

CVE-2021-3959

< 3.3.8.272

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows

6.8MEDIUM

CVE-2021-3554

< 6.24.1-1

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as

9.0CRITICAL

CVE-2021-3553

all versions

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attack

5.3MEDIUM

CVE-2021-3552

all versions

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows

5.3MEDIUM

CVE-2021-3641

<= 7.1.2.33

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Securit

6.1MEDIUM

CVE-2021-3823

< 3.3.8.249

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitd

7.1HIGH

CVE-2017-8931

< 6.2.1-35

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified

9.8CRITICAL

CVE-2018-8955

all versions

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata

9.8CRITICAL

CVE-2014-5350

<= 5.1.5.386

Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary