Approved changes feed: RSS · Atom

cpe:2.3:a:bitdefender:gravityzone_control_center_(on_premises):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitdefender (d5582d91-5be9-5b61-8324-642705c220ed)
ProductGravityzone Control Center (On Premises) (bf7fc192-cee4-545d-ac26-0e690feda7d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2224 vulnerable 2026-06-03 14:55:28.772636 Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
HIGH (8.1)
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
Published: 2024-04-09T13:01:47.416Z
Updated: 2024-08-01T19:03:39.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2223 vulnerable 2026-06-03 14:55:28.766819 Incorrect Regular Expression in GravityZone Update Server (VA-11465)
HIGH (8.1)
An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:  Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for  Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
Published: 2024-04-09T13:01:34.716Z
Updated: 2024-08-12T17:59:36.379Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.