Lucene search

K
MicrosoftForefront Unified Access Gateway

12 matches found

CVE
CVE
added 2010/11/10 3:0 a.m.76 views

CVE-2010-2733

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."

4.3CVSS5.2AI score0.47875EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.59 views

CVE-2011-1969

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vuln...

9.3CVSS7.9AI score0.13515EPSS
CVE
CVE
added 2010/11/10 3:0 a.m.48 views

CVE-2010-2734

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefr...

4.3CVSS5.7AI score0.47875EPSS
CVE
CVE
added 2012/04/10 9:55 p.m.46 views

CVE-2012-0146

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."

5.8CVSS6.5AI score0.25126EPSS
CVE
CVE
added 2012/04/10 9:55 p.m.46 views

CVE-2012-0147

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."

5CVSS5.9AI score0.36517EPSS
CVE
CVE
added 2010/11/10 3:0 a.m.43 views

CVE-2010-2732

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulne...

5.8CVSS6.7AI score0.32258EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.42 views

CVE-2011-1895

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTa...

4.3CVSS5.5AI score0.2112EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.39 views

CVE-2011-1897

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."

4.3CVSS5.1AI score0.15113EPSS
CVE
CVE
added 2010/11/10 3:0 a.m.36 views

CVE-2010-3936

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."

4.3CVSS5.7AI score0.42355EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.35 views

CVE-2011-2012

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."

5CVSS6.7AI score0.19033EPSS
CVE
CVE
added 2018/07/05 8:29 p.m.35 views

CVE-2018-12571

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.

9.8CVSS9.2AI score0.05239EPSS
CVE
CVE
added 2011/10/12 2:52 a.m.33 views

CVE-2011-1896

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."

4.3CVSS5.1AI score0.10694EPSS