CVE-2021-28969

eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search…

published April 1, 2021

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the software.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01316 · 70.5th percentile
Published
2021-04-01T19:47Z
EPSS history
Timeline
  • 01 APR 19:47Z
    eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search…
    cvelistv5