Medium severity6.8NVD Advisory· Published Dec 16, 2021· Updated Jun 17, 2026

CVE-2021-3959

Description

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bitdefender/Gravityzone3 versions
cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:*:*:*:*range: <3.3.8.272
- (no CPE)range: <3.3.8.272
- (no CPE)range: unspecified
Bitdefender/Endpoint Security Toolsllm-fuzzy
Range: <3.3.8.272

Patches

Vulnerability mechanics

References

www.bitdefender.com/support/security-advisories/server-side-request-forgery-in-bitdefender-gravityzone-update-server-in-relay-mode-va-10145nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000