Back to search
CVE-2011-1895
Published: Oct 12, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
49979
vdb-entry
x_refsource_BID
MS11-079
vendor-advisory
x_refsource_MS
76235
vdb-entry
x_refsource_OSVDB
oval:org.mitre.oval:def:13064
vdb-entry
signature
x_refsource_OVAL
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now