CVE-2020-25034

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p71

Published

Oct 26, 2020 (Oct 26, 2020)

Modified

Jun 17, 2026

Description

eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email search feature.

Vendors: fireeye
Products: email malware protection system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.