Bitdefender GravityZone vulnerabilities

CVEs per yearBy the year they were published

1. 20216
2. 20221

Newest CVEs

• CVE-2022-0677

  Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)

  Bitdefender · Update Server

  High7.5
• CVE-2021-3960

  Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)

  Bitdefender · GravityZone

  High7.1
• CVE-2021-3959

  Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

  Bitdefender · GravityZone

  Medium6.8
• CVE-2021-3553

  Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)

  Bitdefender · Endpoint Security Tools

  Medium5.3
• CVE-2021-3554

  Improper Access Control vulnerability in the patchesUpdate API

  Bitdefender · Endpoint Security Tools for Linux

  Critical9.0
• CVE-2021-3552

  Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)

  Bitdefender · Endpoint Security Tools

  Medium5.3
• CVE-2021-3641

  Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)

  Bitdefender · GravityZone

  Medium6.1