CVE-2020-9342: F-Secure Cloud Protection For Salesforce

Medium severity, CVSS 5.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

Affected products

• F-Secure Cloud Protection For Salesforce: before 17.0.605.474 (fixed in 17.0.605.474)
• F-Secure Email And Server Security: before 17.0.605.474 (fixed in 17.0.605.474)
• F-Secure Internet Gatekeeper: before 17.0.605.474 (fixed in 17.0.605.474)

Published 2020-02-22. Last modified 2026-06-17.