EUVD-2020-17729

Malware in sbrugna...

Sql injection

eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the jobid parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3...

Sql injection

eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sortby parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the...

PT-2021-18008

Name of the Vulnerable Software and Affected Versions: FireEye EX 3500 eMPS versions 9.0.1.923211 through 9.0.2 Description: The issue allows remote authenticated users to conduct SQL injection attacks via the job id parameter to the "email search feature". According to the vendor, the issue is...