Known Vulnerabilities for Endpoint Security Tools by Bitdefender

Listed below are 9 of the newest known vulnerabilities associated with the software "Endpoint Security Tools" by "Bitdefender".

These CVEs are retrieved based on exact matches on listed software and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2021-3959	A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools a...	6.8 - MEDIUM	2021-12-16	2021-12-16
CVE-2021-3641	Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Se...	6.1 - MEDIUM	2021-11-09	2021-11-17
CVE-2021-3579	Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefe...	7.8 - HIGH	2021-10-28	2021-11-17
CVE-2021-3576	Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local att...	7.8 - HIGH	2021-10-28	2021-12-03
CVE-2021-3554	Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linu...	9 - CRITICAL	2021-11-24	2021-11-24
CVE-2021-3553	A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an a...	5.3 - MEDIUM	2021-11-24	2021-11-24
CVE-2021-3552	A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools a...	5.3 - MEDIUM	2021-11-24	2021-11-24
CVE-2021-3485	An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux all...	6.6 - MEDIUM	2021-05-24	2021-06-17
CVE-2020-15279	An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions...	3.3 - LOW	2021-05-18	2021-05-24
CVE-2020-8097	An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security...	7.8 - HIGH	2020-08-30	2020-09-04

Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Bitdefender	Endpoint Security Tools	6.6.11.163	All	All	All
Application	Bitdefender	Endpoint Security Tools	-	All	All	All

Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646) - Bitdefender

www.bitdefender.com/support/security-advisories/improper-authentication-vulnerability-bitdefender-endpoint-security-tools-endpoint-security-sdk-va-8646

Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK VA- 6 - Bitdefender X V TAn untrusted search path vulnerability in the product.console.exe as implemented in Bitdefender Endpoinit Security Tools Windows and Endpoint Security e c a SDK allows an unprivileged local attacker to escalate privileges or tamper with the products security " settings. This issue affects Bitdefender Endpoinit Security Tools / - for Windows versions prior to 6.6.18.261; Endpoint Security SDK versions prior to

Bitdefender Endpoint security Software development kit Computer security Vulnerability (computing) Microsoft Windows Privilege (computing) Authentication Security PATH (variable) Browser security .exe Product (business) Antivirus software Security hacker Common Vulnerability Scoring System Common Vulnerabilities and Exposures Internet of things Web service Programming tool

Bitdefender Endpoint Security Tools Version 6.2.34.1000 Release Notes

www.bitdefender.com/support/bitdefender-endpoint-security-tools-version-6-2-34-1000-release-notes-2150.html

I EBitdefender Endpoint Security Tools Version 6.2.34.1000 Release Notes Support

Bitdefender Endpoint security Internet Explorer 6 Computer security Information security McAfee Installation (computer programs) Email Security Technical support Product (business) Free software Threat (computer) Internet of things Web service Microsoft Exchange Server Virtual private network Uninstaller Antivirus software Digital identity

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Known Vulnerabilities for Endpoint Security Tools by Bitdefender