Login Request a demo
GR
Product
Gravityzone
by Bitdefender · last CVE Apr 4, 2025
18
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 10High 6Medium 1Low 0
Severity
All severities18Critical10High6Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gravityzone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3554
10.0
2%
Nov 24
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the…
Affected: before 6.24.1-1; 6.24.1-1
CVE-2025-2244
9.8
1%
Apr 4
Insecure PHP deserialization issue in GravityZone Console (VA-12634)
Affected: before 6.41.2-1
CVE-2024-6980
9.8
1%
Jul 31
Verbose error handling issue in GravityZone Update Server proxy service
Affected: before 6.38.1-5
CVE-2024-4177
9.8
0%
Jun 6
Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)
Affected: before 6.38.1-2
CVE-2024-2224
9.8
1%
Apr 9
Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
Affected: 6.36.1
CVE-2024-2223
9.8
1%
Apr 9
Incorrect Regular Expression in GravityZone Update Server (VA-11465)
Affected: 6.36.1
CVE-2022-2830
9.8
1%
Sep 5
Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the…
Affected: before 6.27.2-2; before 6.29.2-1
CVE-2021-3823
9.8
1%
Oct 28
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute…
Affected: before 3.3.8.249
CVE-2017-8931
9.8
2%
Oct 30
Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors
Affected: before 6.2.1-35
CVE-2018-8955
9.8
4%
Oct 24
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute…
Affected: All versions, or not specified
Showing 10