CVE-2012-0146

EPSS 25.13%
Veröffentlicht 10.04.2012 21:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Forefront Unified Access Gateway Version2010 Updatesp1

Microsoft ≫ Forefront Unified Access Gateway Version2010 Updatesp1_update1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	25.13%	0.957

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/81131

http://secunia.com/advisories/48787

http://www.securityfocus.com/bid/52903

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1026909

Third Party Advisory

VDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-026

https://exchange.xforce.ibmcloud.com/vulnerabilities/74367

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15476

https://nvd.nist.gov/vuln/detail/CVE-2012-0146

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0146

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0146

EUVD