Known Vulnerabilities for products from Bitdefender

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Bitdefender".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-3960 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of... 7.8 - HIGH 2021-12-16 2021-12-21
CVE-2021-3959 A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools a... 7.5 - HIGH 2021-12-16 2021-12-22
CVE-2021-3823 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of... 9.8 - CRITICAL 2021-10-28 2021-10-28
CVE-2021-3641 Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Se... 5.5 - MEDIUM 2021-11-09 2021-11-15
CVE-2021-3579 Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefe... 7.8 - HIGH 2021-10-28 2021-11-28
CVE-2021-3576 Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local att... 7.8 - HIGH 2021-10-28 2021-12-03
CVE-2021-3554 Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linu... 10 - CRITICAL 2021-11-24 2021-12-03
CVE-2021-3553 A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an a... 7.5 - HIGH 2021-11-24 2021-11-30
CVE-2021-3552 A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools a... 7.5 - HIGH 2021-11-24 2021-12-01
CVE-2021-3485 An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux all... 6.6 - MEDIUM 2021-05-24 2021-06-17
CVE-2021-3423 Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security ... 7.8 - HIGH 2021-05-18 2021-05-25
CVE-2020-15734 An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload ca... 5.5 - MEDIUM 2021-04-12 2021-04-21
CVE-2020-15733 An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misr... 6.5 - MEDIUM 2020-12-14 2020-12-16
CVE-2020-15732 Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security al... 7.5 - HIGH 2021-06-22 2021-06-29
CVE-2020-15731 An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an a... 3.6 - LOW 2020-09-30 2020-10-09
CVE-2020-15297 Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools ver... 9.1 - CRITICAL 2020-11-09 2020-11-24
CVE-2020-15294 Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in mu... 7 - HIGH 2020-12-17 2020-12-22
CVE-2020-15293 Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insuffic... 5.5 - MEDIUM 2020-12-17 2020-12-22
CVE-2020-15292 Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymE... 5.5 - MEDIUM 2020-12-17 2020-12-22
CVE-2020-15279 An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions... 3.3 - LOW 2021-05-18 2021-05-24
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Bitdefender

Type Vendor Product Version
ApplicationBitdefenderAntimalware Software Development Kit3.0.1.204
ApplicationBitdefenderAntivirus-
ApplicationBitdefenderAntivirus 2020-
ApplicationBitdefenderAntivirus For Mac-
ApplicationBitdefenderAntivirus Plus-
HardwareBitdefenderBox-
Operating
System		BitdefenderBox 2 Firmware2.1.47.36
Operating
System		BitdefenderBox Firmware-
ApplicationBitdefenderEndpoint Security-
ApplicationBitdefenderEndpoint Security Tools-
ApplicationBitdefenderEngines-
ApplicationBitdefenderGravityzone-
ApplicationBitdefenderHypervisor Introspection1.132.0
ApplicationBitdefenderSafepay23.0.10.34
ApplicationBitdefenderScan Engines7.76662
ApplicationBitdefenderTotal Security21.0.24.62
ApplicationBitdefenderTotal Security 2020-
ApplicationBitdefenderUpdate Server-

Popular searches for "Bitdefender"

Bitdefender - Global Leader in Cybersecurity Software

www.bitdefender.com

Bitdefender - Global Leader in Cybersecurity Software Bitdefender | is a global cybersecurity leader you can trust and rely on, protecting over 500 million systems in more than 150 countries.

www.bitdefender.com/?ctrsel=1 www.bitdefender.com/world/?ctrsel=1 www.bitdefender.com/business/enterprise-products/network-traffic-security-analytics.html www.bitdefender.com/site/view/global-sites.html www.bitdefender.com/business/enterprise-products/mobile-security.html www.bitdefender.com/world www.bitdefender.my Bitdefender Computer security Software Security Internet of things Innovation Cloud computing Web service Virtual private network Digital identity Antivirus software Business Technical support Computer network Continuous testing Product (business) Free software Threat (computer) User (computing) Analytics

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].