CVE-2013-7369: SQL Injection
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7369?
CVE-2013-7369 is categorized as a high-severity SQL injection vulnerability affecting several F-Secure products.
How do I fix CVE-2013-7369?
To fix CVE-2013-7369, users should upgrade to the latest patched versions of the affected F-Secure products.
Which versions of F-Secure are affected by CVE-2013-7369?
CVE-2013-7369 affects F-Secure Anti-Virus for Microsoft Exchange Server versions before HF02, Anti-Virus for Windows Servers and Citrix Servers before HF09, among others.
What type of vulnerability is CVE-2013-7369?
CVE-2013-7369 is an SQL injection vulnerability that can allow an attacker to execute arbitrary SQL code.
What are the potential impacts of CVE-2013-7369?
The exploitation of CVE-2013-7369 can lead to unauthorized access to sensitive data or data manipulation in the affected applications.