Bitdefender / Gravityzone
18 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-2243 | SSRF in GravityZone Console via DNS Truncation (VA-12634) | MEDIUM | 6.9 | Apr 4, 2025 |
| CVE-2025-2244 | Insecure PHP deserialization issue in GravityZone Console (VA-12634) | CRITICAL | 9.5 | Apr 4, 2025 |
| CVE-2024-6980 | Verbose error handling issue in GravityZone Update Server proxy service | CRITICAL | 9.2 | Jul 31, 2024 |
| CVE-2024-4177 | Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) | CRITICAL | 9.8 | Jun 6, 2024 |
| CVE-2024-2224 | Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) | CRITICAL | 9.8 | Apr 9, 2024 |
| CVE-2024-2223 | Incorrect Regular Expression in GravityZone Update Server (VA-11465) | CRITICAL | 9.8 | Apr 9, 2024 |
| CVE-2022-2830 | Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573) | CRITICAL | 9.8 | Sep 5, 2022 |
| CVE-2022-0677 | Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) | HIGH | 7.5 | Apr 7, 2022 |
| CVE-2021-3960 | Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146) | HIGH | 7.8 | Dec 16, 2021 |
| CVE-2021-3959 | Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) | HIGH | 7.5 | Dec 16, 2021 |
| CVE-2021-3553 | Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) | HIGH | 7.5 | Nov 24, 2021 |
| CVE-2021-3554 | Improper Access Control vulnerability in the patchesUpdate API | CRITICAL | 10.0 | Nov 24, 2021 |
| CVE-2021-3552 | Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) | HIGH | 7.5 | Nov 24, 2021 |
| CVE-2021-3641 | Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921) | MEDIUM | 6.1 | Nov 9, 2021 |
| CVE-2021-3823 | Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode | CRITICAL | 9.8 | Oct 28, 2021 |
| CVE-2017-8931 | Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors. | CRITICAL | 9.8 | Oct 30, 2018 |
| CVE-2018-8955 | The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attacke… | CRITICAL | 9.8 | Oct 24, 2018 |
| CVE-2014-5350 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot)… | MEDIUM | 5.0 | Aug 19, 2014 |
Showing 1 to 18 of 18 CVEs