cvedb.io
CVE-2021-3552
MEDIUM · CVSS 5.3
EPSS exploitation probability: 0%
Published 2021-11-24T16:15:13.667 · Last modified 2026-06-17T04:05:20.067

Summary

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1.

Affected products

bitdefender — endpoint_security_tools

Does this affect you?

Add your gear to cvedb and we'll alert you only when bitdefender ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.