← Voltar para CVEs
CVE-2011-1897
N/ADescricao
Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado10/12/2011
Ultima modificacao4/29/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
microsoft:forefront_unified_access_gateway
Fraquezas (CWE)
CWE-79
Referencias
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079(secure@microsoft.com)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13039(secure@microsoft.com)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13039(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.