CVSS: 7.5EPSS: 36%CPEs: 2EXPL: 0CVE-2012-0147
https://notcve.org/view.php?id=CVE-2012-0147
10 Apr 2012 — Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability." Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 y SP1 Update 1 no configura de forma adecuada el sitio Web por defecto, lo que permite a atacantes remotos obtener información sensible a través de peticiones HTTPS manipuladas... • http://osvdb.org/81132 • CWE-16: Configuration •
CVSS: 6.1EPSS: 21%CPEs: 4EXPL: 0CVE-2011-1895
https://notcve.org/view.php?id=CVE-2011-1895
12 Oct 2011 — CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability." Una vulnerabilidad de inyección CRLF en Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1 , Update 2 y SP1 permite a atacantes remotos inyectar cabecer... • http://osvdb.org/76235 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 6.1EPSS: 10%CPEs: 4EXPL: 0CVE-2011-1896
https://notcve.org/view.php?id=CVE-2011-1896
12 Oct 2011 — Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability." Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Microsoft Access Gateway Forefront Unificado (UAG) 2010 Gold, Update 1, Update 2 y SP1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores... • http://osvdb.org/76233 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 15%CPEs: 4EXPL: 0CVE-2011-1897
https://notcve.org/view.php?id=CVE-2011-1897
12 Oct 2011 — Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability." Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2 y SP1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores ... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.3EPSS: 16%CPEs: 4EXPL: 0CVE-2011-1969
https://notcve.org/view.php?id=CVE-2011-1969
12 Oct 2011 — Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability." Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2 y SP1 incluye el archivo MicrosoftClient.jar que contiene un applet de Java firmado, lo que permite a atacantes remotos ej... • http://www.securityfocus.com/bid/49983 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 19%CPEs: 4EXPL: 0CVE-2011-2012
https://notcve.org/view.php?id=CVE-2011-2012
12 Oct 2011 — Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash." Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2 y SP1 no validan correctamente las cookies de sesión, lo que permite a atacantes remotos provocar una denegación de servicio (interrupción de IIS) a través de tráf... • http://www.securityfocus.com/bid/49980 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 42%CPEs: 3EXPL: 0CVE-2010-3936
https://notcve.org/view.php?id=CVE-2010-3936
10 Nov 2010 — Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability." Vulnerabilidad de secuencias de comandos en sitios cruzados en Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, y 2010 Update 2 permite a atacantes remotos inyectar código web o HTML a través de vectores no... • http://www.us-cert.gov/cas/techalerts/TA10-313A.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 29%CPEs: 3EXPL: 0CVE-2010-2732
https://notcve.org/view.php?id=CVE-2010-2732
10 Nov 2010 — Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability." Vulnerabilidad de redirección abierta en el interfaz web de Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2, permite a atacantes remotos redirigir a usuarios... • http://www.us-cert.gov/cas/techalerts/TA10-313A.html • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 47%CPEs: 3EXPL: 0CVE-2010-2733
https://notcve.org/view.php?id=CVE-2010-2733
10 Nov 2010 — Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Web Monitor de Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 que permite a atacantes remotos inyectar secuenc... • http://www.us-cert.gov/cas/techalerts/TA10-313A.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 47%CPEs: 3EXPL: 0CVE-2010-2734
https://notcve.org/view.php?id=CVE-2010-2734
10 Nov 2010 — Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el el portal móvil de Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, y 20... • http://www.us-cert.gov/cas/techalerts/TA10-313A.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •