Bitdefender Safepay vulnerabilities

4 CVEs affecting Bitdefender Safepay, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-15734, published 2021-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6737, published 2019-06-03. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that…
CVE-2019-6738, published 2019-06-03. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that…
CVE-2019-6736, published 2019-06-03. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vulnerability in that…
CVE-2020-15734, published 2021-04-12. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or…