cvedb.io
CVE-2025-2243
HIGH · CVSS 7.3
EPSS exploitation probability: 0%
Published 2025-04-04T10:15:16.313 · Last modified 2026-06-17T09:06:36.577

Summary

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1.

Affected products

bitdefender — gravityzone

Does this affect you?

Add your gear to cvedb and we'll alert you only when bitdefender ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.