Bitdefender Gravityzone vulnerabilities

• bitdefender gravityzone update server Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646) CVE-2025-2245 6.9 MediumApril 4, 2025
• bitdefender gravityzone, gravityzone console +1 more SSRF in GravityZone Console via DNS Truncation (VA-12634) CVE-2025-2243 6.9 MediumApril 4, 2025
• bitdefender gravityzone, gravityzone console +1 more Insecure PHP deserialization issue in GravityZone Console (VA-12634) CVE-2025-2244 9.5 CriticalApril 4, 2025
• bitdefender gravityzone, gravityzone update server +1 more Verbose error handling issue in GravityZone Update Server proxy service CVE-2024-6980 9.2 CriticalJuly 31, 2024
• bitdefender gravityzone, gravityzone console on-premise +1 more Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) CVE-2024-4177 8.1 HighJune 6, 2024
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) CVE-2024-2224 8.1 HighApril 9, 2024
• bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 more Incorrect Regular Expression in GravityZone Update Server (VA-11465) CVE-2024-2223 8.1 HighApril 9, 2024
• bitdefender gravityzone, gravityzone cloud console, gravityzone console on-premise +2 more Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573) CVE-2022-2830 8.8 HighSeptember 5, 2022
• bitdefender endpoint security tools for linux, endpoint security tools for windows, endpoint security tools +2 more +4 more Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) CVE-2022-0677 7.5 HighApril 7, 2022
• bitdefender gravityzone Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146) CVE-2021-3960 7.1 HighDecember 16, 2021
• bitdefender gravityzone Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) CVE-2021-3959 6.8 MediumDecember 16, 2021
• bitdefender endpoint security tools, gravityzone, unified endpoint for linux +2 more Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) CVE-2021-3553 5.3 MediumNovember 24, 2021
• bitdefender endpoint security tools for linux, endpoint security tools, gravityzone +1 more +3 more Improper Access Control vulnerability in the patchesUpdate API CVE-2021-3554 9.0 CriticalNovember 24, 2021
• bitdefender endpoint security tools, gravityzone +1 more Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) CVE-2021-3552 5.3 MediumNovember 24, 2021
• bitdefender gravityzone Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921) CVE-2021-3641 6.1 MediumNovember 9, 2021
• bitdefender gravityzone, gravityzone update server +1 more Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode CVE-2021-3823 7.1 HighOctober 28, 2021
• bitdefender gravityzone business security Privilege escalation in Bitdefender GravityZone Business Security CVE-2021-3423 7.8 HighMay 18, 2021
• bitdefender gravityzone Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access... CVE-2017-8931 9.8 CriticalOctober 30, 2018
• bitdefender gravityzone The installer for BitDefender GravityZone relies on an encoded string in a filename to determine... CVE-2018-8955 9.8 CriticalOctober 24, 2018
• bitdefender gravityzone Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow... CVE-2014-5350 Public exploit EPSS 63.9% 5.0 MediumAugust 19, 2014