Critical severity9.8NVD Advisory· Published Jul 31, 2024· Updated Jun 17, 2026

CVE-2024-6980

Description

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-5 running only on premise.

Affected products

Bitdefender/Gravityzone2 versions
cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:on-premises:*:*:*+ 1 more
- cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:on-premises:*:*:*range: <6.38.1-5
- (no CPE)range: <6.38.1-5
GravityZone/GravityZone Update Serverllm-create
Range: <6.38.1-5
Bitdefender/Gravityzone Update Servercpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

www.bitdefender.com/consumer/support/support/security-advisories/verbose-error-handling-issue-in-gravityzone-update-server-proxy-service/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000