Skip to main content

Update Server

2 CVEs product

Monthly

CVE-2022-0677 Apr 07, 19:15 HIGH This Week

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Gravityzone Endpoint Security Tools Bitdefender +1
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2020-15297 Nov 09, 09:15 CRITICAL Act Now

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows an unprivileged attacker to bypass the. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Bitdefender Update Server
NVD
CVSS 3.1
9.1
EPSS
0.8%
EPSS 1% CVSS 7.5
HIGH This Week

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Gravityzone +3
NVD
EPSS 1% CVSS 9.1
CRITICAL Act Now

Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows an unprivileged attacker to bypass the. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Bitdefender Update Server
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy