CVE-2021-3959

HIGH 7.5CVE-2021-3959 · Published 16/12/2021 · updated 17/06/2026

In short

CVE-2021-3959 is a HIGH (CVSS 7.5) vulnerability affecting gravityzone (bitdefender).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.8% of all vulnerabilities.
Fix: update to 3.3.8.272 or later.

Package	Affected versions	Patched versions
gravityzone bitdefender	`< 3.3.8.272`	`3.3.8.272`

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

References

bitdefender.com/support/security-advisories/server-side-request-forgery-in-bitdefender-gravityzone-update-server-in-relay-mode-va-10145 · Vendor Advisory

More vulnerabilities in gravityzone

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gravityzone

bitdefender

< 3.3.8.272

3.3.8.272

More vulnerabilities in gravityzone

See all →