Lucene search

PRIOn knowledge basePRION:CVE-2010-2734

HistoryNov 10, 2010 - 3:00 a.m.

Cross site scripting

2010-11-1003:00:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.844 High

EPSS

Percentile

98.4%

JSON

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka “XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability.”

CPENameOperatorVersion
forefront_unified_access_gatewayeq2010
forefront_unified_access_gatewayeq2010 update1
forefront_unified_access_gatewayeq2010 update2

Name	Operator	Version
forefront_unified_access_gateway	eq	2010
forefront_unified_access_gateway	eq	2010 update1
forefront_unified_access_gateway	eq	2010 update2

References

www.us-cert.gov/cas/techalerts/TA10-313A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-089

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12058

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.844 High

EPSS

Percentile

98.4%

JSON

Related for PRION:CVE-2010-2734