Lucene search

K
cve[email protected]CVE-2013-7369
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-7369

2022-10-0316:14:52
CWE-89
web.nvd.nist.gov
17
sql injection
fsdbcom
f-secure
activex control
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.3%

SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Anti-Virus for Citrix Servers 9.00 before HF09, and F-Secure Email and Server Security and F-Secure Server Security 9.20 before HF01 allows remote attackers to execute arbitrary SQL commands via unknown vectors, related to GetCommand.

Affected configurations

NVD
Node
f-secureanti-virusMatch9.00citrix_servers
OR
f-secureanti-virusMatch9.00exchange_server
OR
f-secureanti-virusMatch9.00windows_server
OR
f-secureanti-virusMatch9.10exchange_server
OR
f-secureemail_and_server_securityMatch9.20
OR
f-secureserver_securityMatch9.20

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.3%

Related for CVE-2013-7369