Bitdefender Gravityzone Control Center vulnerabilities

2 CVEs affecting Bitdefender Gravityzone Control Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2224, published 2024-04-09.

More from Bitdefender.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-2224, published 2024-04-09. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on…
• CVE-2024-2223, published 2024-04-09. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the…