CVE-2013-7369

no score yetEPSS 1.2%

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f-secure:anti-virus
f-secure:email_and_server_security
f-secure:server_security

References

http://www.f-secure.com/en/web/labs_global/fsc-2013-1
http://www.zerodayinitiative.com/advisories/ZDI-13-095/
http://www.f-secure.com/en/web/labs_global/fsc-2013-1
http://www.zerodayinitiative.com/advisories/ZDI-13-095/

Check your stack JSON