CVE-2021-3959

MEDIUM

Bitdefender GravityZone < 3.3.8.272 - Server-Side Request Forgery in EPPUpdateService

Title source: llm

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-in-bitdefender-gravityzone-update-server-in-relay-mode-va-10145

Scores

CVSS v3 6.8

EPSS 0.0169

EPSS Percentile 74.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

CWE

CWE-918

Status published

Products (1)

bitdefender/gravityzone < 3.3.8.272

Published Dec 16, 2021

Tracked Since Feb 18, 2026