Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bitdefender Endpoint Security Tools 6.6.27.390, 7.1.2.33 Clear all filters
TI-2021-02506 CVE-2021-3553 · GHSA-6x2g-jp65-m547

Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)

Priority LOW 35

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01253 Published 2021-11-24 Fixed in 6.6.27.390, 7.1.2.33 +2 CWE-918