What’s Vulnerable › Vulnerabilities

CVE-2013-7369

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-18 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.

Affected products

• F-Secure Anti-Virus: 9.00, 9.10
• F-Secure Email And Server Security: 9.20
• F-Secure Server Security: 9.20

References

• http://www.f-secure.com/en/web/labs_global/fsc-2013-1
• http://www.zerodayinitiative.com/advisories/ZDI-13-095/
• http://www.f-secure.com/en/web/labs_global/fsc-2013-1
• http://www.zerodayinitiative.com/advisories/ZDI-13-095/

Get alerted when CVE-2013-7369 or the next vulnerability affects your stack