CVE-2018-12571

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the origurl parameter, possibly causing a traffic amplification and/or SSRF outcome...

PT-2018-11259

Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway 2010 Description The issue allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig url parameter in the...

CVE-2018-12571: Server-Side Request Forgery (SSRF)

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the origurl parameter, possibly causing a traffic amplification and/or SSRF outcome...