Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2011-1895

šŸ—“ļøĀ 12 Oct 2011Ā 01:00:00Reported byĀ microsoftTypeĀ 
cve
Ā cvešŸ”—Ā web.nvd.nist.govšŸ‘Ā 47Ā Views

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attack

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Check Point Advisories		Microsoft Forefront UAG ExcelTable Information Disclosure (MS11-079; CVE-2011-1895)
11 Oct 201100:00
ā€“checkpoint_advisories
Cvelist		CVE-2011-1895
12 Oct 201101:00
ā€“cvelist
Microsoft KB		MS11-079: Vulnerabilities in Microsoft Forefront Unified Access Gateway could cause remote code execution: October 11, 2011
11 Oct 201100:00
ā€“mskb
NVD		CVE-2011-1895
12 Oct 201102:52
ā€“nvd
OpenVAS		Microsoft Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)
26 Oct 201200:00
ā€“openvas
OpenVAS		MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)
26 Oct 201200:00
ā€“openvas
Prion		Crlf injection
12 Oct 201102:52
ā€“prion
securityvulns		Microsoft Forefront Unified Access Gateway multiple security vulnerabilities
16 Oct 201100:00
ā€“securityvulns
Tenable Nessus		MS11-079: Vulnerabilities in Microsoft Forefront Unified Access Gateway Could Cause Remote Code Execution (2544641)
11 Oct 201100:00
ā€“nessus
Symantec		Microsoft Forefront Unified Access Gateway (CVE-2011-1895) HTTP Response Splitting Vulnerability
11 Oct 201100:00
ā€“symantec
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 Apr 2026 01:13Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24.3
EPSS0.20274
CWE-94
crlf injectionhttp splittingcross-site scriptingmicrosoft forefront uagcve-2011-1895
47