High severity8.1NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-2223

Description

An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:

Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bitdefender/Endpoint Security2 versions
cpe:2.3:a:bitdefender:endpoint_security:7.0.5.200089:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:bitdefender:endpoint_security:7.0.5.200089:*:*:*:*:linux:*:*
- cpe:2.3:a:bitdefender:endpoint_security:7.9.9.380:*:*:*:*:windows:*:*
Bitdefender/Gravityzone Control Center
cpe:2.3:a:bitdefender:gravityzone_control_center:6.36.1:*:*:*:on_premises:*:*:*
Bitdefender/Bitdefender Endpoint Security Tools for Windowsllm-fuzzy
Range: 7.0.5.200089
Bitdefender/Gravityzone Update Serverllm-fuzzy
Bitdefender/GravityZone Control Center (On Premises)llm-fuzzy2 versions
6.36.1+ 1 more
- (no CPE)range: 6.36.1
- (no CPE)range: 6.36.1
Bitdefender/Endpoint Security Tools for Maccpe-rescue2 versions
7.0.5.200089+ 1 more
- (no CPE)range: 7.0.5.200089
- (no CPE)range: 7.9.9.380

Patches

Vulnerability mechanics

References

www.bitdefender.com/support/security-advisories/incorrect-regular-expression-in-gravityzone-update-server-va-11465/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000