Vulnerability Details CVE-2013-7369
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.6%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2013-7369
-
cpe:2.3:a:f-secure:anti-virus:9.00
-
cpe:2.3:a:f-secure:anti-virus:9.10
-
cpe:2.3:a:f-secure:email_and_server_security:9.20
-
cpe:2.3:a:f-secure:server_security:9.20