Email Malware Protection System

email_malware_protection_system

Vendor: Fireeye • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-28970 1Fireeye 1Email Malware Protection System Jun 17, 2026 Apr 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the...Show more eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3.Show less
CVE-2021-28969 1Fireeye 1Email Malware Protection System Jun 17, 2026 Apr 1, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3....Show more eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the software.Show less
CVE-2020-25034 1Fireeye 1Email Malware Protection System Jun 17, 2026 Oct 26, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature.