CVE-2021-3959: Bitdefender Gravityzone

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

Affected products

• Bitdefender Gravityzone: before 3.3.8.272 (fixed in 3.3.8.272)

Published 2021-12-16. Last modified 2026-06-17.