CVE-2022-28886: F-Secure Cloud Protection For Salesforce

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine

Affected products

• F-Secure Cloud Protection For Salesforce: any version
• F-Secure Collaboration Protection: any version
• F-Secure Elements Endpoint Protection: any version
• F-Secure Internet Gatekeeper: affected versions not specified
• F-Secure Linux Security: any version

Published 2022-09-23. Last modified 2026-06-17.