CVE-2010-3936

CVE-2010-3936 is an XSS in Signurl.asp affecting Forefront UAG 2010 (Gold) and Update 1/Update 2. The MS10-089 bulletin (KB2433584/KB2433585/KB2418933) addresses this vulnerability along with related UAG XSS flaws, requiring update installation to mitigate. Exploitation would enable non-persisten...

MS10-089: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Elevation of Privilege (2316074)

The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities : - An unspecified redirection spoofing vulnerability, which could result in users being redirected from the UAG server to a similar looking, malicious server. CVE-2010-2732 - An unspecifie...