Fireeye EX 3500
Approved changes feed: RSS · Atom
cpe:2.3:h:fireeye:ex_3500:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Fireeye (8ba7696b-46fa-50ea-9bae-e16f20600a8a) |
|---|---|
| Product | Ex 3500 (e2462136-edab-56af-8632-5072c1b63dc6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0317 |
not_vulnerable | 2026-06-03 14:54:02.131863 |
Cross-Site Scripting in FireEye EX
MEDIUM (5.4)
Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.
Published: 2024-01-15T16:23:34.711Z
Updated: 2025-06-03T13:59:52.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28970 |
not_vulnerable | 2026-06-03 14:44:19.148477 |
Details available
eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3.
Published: 2021-04-01T19:50:51.000Z
Updated: 2024-08-03T21:55:12.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28969 |
not_vulnerable | 2026-06-03 14:44:19.148042 |
Details available
eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the software.
Published: 2021-04-01T19:47:48.000Z
Updated: 2024-08-03T21:55:12.382Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25034 |
not_vulnerable | 2026-06-03 14:42:08.405878 |
Details available
eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature.
Published: 2020-10-26T18:42:31.000Z
Updated: 2024-08-04T15:26:09.279Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.