Bitdefender Update Server — known CVE vulnerabilities

Every CVE whose affected-product data names Bitdefender Update Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2008-0396 — CVSS 7.8 (high): Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for…
• CVE-2022-0677 — CVSS 7.5 (high): Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in…
• CVE-2020-15297 — CVSS 7.1 (high): Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to…