Microsoft

Forefront Unified Access Gateway

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-12571

Exploit
  • EPSS 5.24%
  • Veröffentlicht 05.07.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:45:27

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a tr...

5.8

CVE-2012-0146

  • EPSS 25.13%
  • Veröffentlicht 10.04.2012 21:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vu...

5

CVE-2012-0147

  • EPSS 36.52%
  • Veröffentlicht 10.04.2012 21:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Defa...

5

CVE-2011-2012

  • EPSS 19.03%
  • Veröffentlicht 12.10.2011 02:52:44
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Ses...

4.3

CVE-2011-1895

  • EPSS 21.12%
  • Veröffentlicht 12.10.2011 02:52:43
  • Zuletzt bearbeitet 11.04.2025 00:51:21

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XS...

4.3

CVE-2011-1896

  • EPSS 10.69%
  • Veröffentlicht 12.10.2011 02:52:43
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS ...

4.3

CVE-2011-1897

  • EPSS 15.11%
  • Veröffentlicht 12.10.2011 02:52:43
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vul...

9.3

CVE-2011-1969

  • EPSS 13.52%
  • Veröffentlicht 12.10.2011 02:52:43
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified ...

4.3

CVE-2010-2734

  • EPSS 47.88%
  • Veröffentlicht 10.11.2010 03:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ...

4.3

CVE-2010-3936

  • EPSS 42.36%
  • Veröffentlicht 10.11.2010 03:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS i...