CVE-2013-7369: F-Secure Anti-Virus

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.

Affected products

• F-Secure Anti-Virus: version 9.00 only; version 9.10 only
• F-Secure Email And Server Security: version 9.20 only
• F-Secure Server Security: version 9.20 only

Published 2014-04-18. Last modified 2026-06-17.