CVE-2011-1895
medium · 4.3CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
4.3
CVSS
11.1%
EPSS (exploit prob.)
96th
EPSS percentile
2011-10-12
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | forefront_unified_access_gateway | 2010 |
| microsoft | forefront_unified_access_gateway | 2010 |
| microsoft | forefront_unified_access_gateway | 2010 |
| microsoft | forefront_unified_access_gateway | 2010 |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/76235
- http://www.securityfocus.com/bid/49979
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064
- http://osvdb.org/76235
- http://www.securityfocus.com/bid/49979
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-1895