Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bitdefender GravityZone 6.24.1-1 Clear all filters
TI-2021-02506 CVE-2021-3553 · GHSA-6x2g-jp65-m547

Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)

Priority LOW 35

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01253 Published 2021-11-24 Fixed in 6.6.27.390, 7.1.2.33 +2 CWE-918
TI-2021-02507 CVE-2021-3554 · GHSA-6wjr-cr9m-279q

Improper access control in Bitdefender Endpoint Security Tools for Linux

Priority MEDIUM 47

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02117 Published 2021-11-24 Fixed in 6.6.27.390, 7.1.2.33 +2 CWE-284