GravityZone Console vulnerabilities

2 known vulnerabilities in GravityZone Console from Bitdefender. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  GravityZone Console: Deserialization of Untrusted Data

  CVE-2025-2244Apr 4, 2025BitdefenderEPSS 1.11%

  A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely uses php unserialize() on user-supplied input without validation. By crafting a malicious serialized payload, an attacker can trigger PHP o

• 7.3 High severity

  GravityZone Console: Server-Side Request Forgery

  CVE-2025-2243Apr 4, 2025Bitdefender

  A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execu