Vulnerability Details CVE-2011-1896
Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.107
EPSS Ranking 93.0%
CVSS Severity
CVSS v2 Score 4.3
References
- http://osvdb.org/76233
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12197
- http://osvdb.org/76233
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12197
Products affected by CVE-2011-1896
-
cpe:2.3:a:microsoft:forefront_unified_access_gateway:2010