What’s Vulnerable › Products

Bitdefender GravityZone vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Bitdefender GravityZone version is affected

Latest Bitdefender GravityZone vulnerabilities

• CVE-2025-2244 — Insecure PHP deserialization issue in GravityZone Console (VA-12634) (CVSS 9.8)
• CVE-2025-2243 — SSRF in GravityZone Console via DNS Truncation (VA-12634) (CVSS 7.3)
• CVE-2024-6980 — Verbose error handling issue in GravityZone Update Server proxy service (CVSS 9.8)
• CVE-2024-4177 — Host whitelist parser issue in GravityZone Console On-Premise (VA-11554) (CVSS 9.8)
• CVE-2022-2830 — Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573) (CVSS 9.8)
• CVE-2022-0677 — Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144) (CVSS 7.5)
• CVE-2021-3960 — Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146) (CVSS 7.8)
• CVE-2021-3959 — Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) (CVSS 7.5)
• CVE-2021-3554 — Improper Access Control vulnerability in the patchesUpdate API (CVSS 10.0)
• CVE-2021-3553 — Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825) (CVSS 7.5)
• CVE-2021-3552 — Insufficient validation on regular expression in EPPUpdateService config file (VA-9825) (CVSS 7.5)
• CVE-2021-3641 — Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921) (CVSS 6.1)
• CVE-2021-3823 — Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode (CVSS 9.8)
• CVE-2017-8931 — (CVSS 9.8)
• CVE-2018-8955 — (CVSS 9.8)
• CVE-2014-5350 — (CVSS 5.0)