Vulnerabilities

TI-2018-09021 CVE-2018-12571 · GHSA-rcm8-cg2r-pcq3

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway…

HIGH 66

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url pa…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.3069 Published 2018-07-05 No fix listed CWE-918

TI-2012-00144 CVE-2012-0147 · GHSA-5f59-cr5p-9xh9

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not…

MEDIUM 49

Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.3562 Published 2012-04-10 No fix listed CWE-16

TI-2012-00143 CVE-2012-0146 · GHSA-3chf-r576-v3g8

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1…

LOW 39

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, a…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.10996 Published 2012-04-10 No fix listed CWE-20

TI-2011-01778 CVE-2011-2012 · GHSA-9q92-w4h6-42xf

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

MEDIUM 40

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.16588 Published 2011-10-12 No fix listed CWE-20

TI-2011-01739 CVE-2011-1969 · GHSA-3pj4-6qw8-r7x8

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1…

MEDIUM 57

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on cl…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.17309 Published 2011-10-12 No fix listed CWE-94

TI-2011-01673 CVE-2011-1897 · GHSA-4gp7-vm73-w2x3

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway…

LOW 31

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08397 Published 2011-10-12 No fix listed CWE-79

TI-2011-01672 CVE-2011-1896 · GHSA-v44j-jhwx-v5hm

Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway…

LOW 31

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08256 Published 2011-10-12 No fix listed CWE-79

TI-2011-01671 CVE-2011-1895 · GHSA-cxfx-7xj7-qwjw

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010…

LOW 33

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attack…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.11137 Published 2011-10-12 No fix listed CWE-94

TI-2010-03739 CVE-2010-3936 · GHSA-3j5w-2wjq-63hj

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified…

LOW 38

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via u…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.18769 Published 2010-11-10 No fix listed CWE-79

TI-2010-02622 CVE-2010-2734 · GHSA-mw2f-f9cv-429m

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront…

LOW 35

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.14233 Published 2010-11-10 No fix listed CWE-79

TI-2010-02621 CVE-2010-2733 · GHSA-68w3-hcjc-pxw8

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront…

LOW 35

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.14233 Published 2010-11-10 No fix listed CWE-79

TI-2010-02620 CVE-2010-2732 · GHSA-7443-8957-rjqm

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access…

MEDIUM 41

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduc…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.13417 Published 2010-11-10 No fix listed CWE-20

Vulnerabilities

Filters