Bitdefender Endpoint Security — known CVE vulnerabilities

Every CVE whose affected-product data names Bitdefender Endpoint Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-8108 — CVSS 8.2 (high): Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service…
• CVE-2020-8097 — CVSS 8.1 (high): An improper authentication vulnerability in Bitdefender Endpoint Security Tools for Windows and Bitdefender Endpoint Security SDK allows an…
• CVE-2024-2223 — CVSS 8.1 (high): An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request…
• CVE-2024-2224 — CVSS 8.1 (high): Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of…
• CVE-2025-5317 — CVSS 5.5 (medium): An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 allows local users…