CVE-2021-28970: Fireeye Email Malware Protection System

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3.

Affected products

• Fireeye Email Malware Protection System: version 9.0.1.923211 only

Published 2021-04-01. Last modified 2026-06-17.