← Database

CVE-2021-3959

MEDIUM CVSS: 6.8 Published: 2021-12-16 Modified: 2026-06-17

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

Affected Platforms

Bitdefender Gravityzone

Weakness Type

CWE-918, CWE-918

References