Advisories · Technology
Bitdefender Endpoint Security Tools.
Every CVE that names Bitdefender Endpoint Security Tools among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)
- Bitdefender Total Security
- Bitdefender Internet Security
- Memory corruption
- CVSS 5.3 Medium
Server-Side Request Forgery in EPPUpdateService remote config file (VA-9825)
- Bitdefender Endpoint Security Tools
- Bitdefender Unified Endpoint for Linux
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Insufficient validation on regular expression in EPPUpdateService config file (VA-9825)
- Bitdefender Endpoint Security Tools
- Bitdefender GravityZone
- Server-side request forgery (SSRF)
- CVSS 7.8 High
Privilege escalation via SeImpersonatePrivilege
- Bitdefender Endpoint Security Tools
- Bitdefender Total Security
- Privilege escalation