CVE-2013-7369: SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for...

Security readout for executives and security teams

This is an old SQL injection issue in F-Secure server security products. If an affected legacy product remains installed without the named hotfix level, a remote attacker could potentially make the product run unintended SQL commands. The public bundle does not show active exploitation or enough detail to assess internet-scale urgency. Likely exposure is limited to organizations still running the listed legacy F-Secure server products below their hotfix thresholds. Email, Windows Server, and Citrix server deployments are the main assets to inventory. The source bundle does not clarify whether exposure requires network reachability to a specific service or interface. Medium urgency if legacy F-Secure server products remain in production; otherwise low. The business risk is concentrated in older server security deployments, especially email and remote access infrastructure, but public evidence is incomplete and no active exploitation is cited. Mitigation focus: Upgrade affected F-Secure products to the named hotfix level or later.; Check current F-Secure vendor guidance for supported replacement versions.; Remove unsupported legacy F-Secure server products where feasible..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.