76235

49979

MS11-079

oval:org.mitre.oval:def:13064

The version of Forefront Unified Access Gateway (UAG) running on the remote host has multiple vulnerabilities in the Web Monitor component :

  - An HTTP response splitting vulnerability in     ExcelTable.asp. (CVE-2011-1895)

  - A reflected XSS in ExcelTable.asp. (CVE-2011-1896)

  - A reflected XSS in Default.asp. (CVE-2011-1897)

  - A code execution vulnerability in a signed Java applet.
    Users that access the UAG server from a Java-enabled     web browser are affected. (CVE-2011-1969)

  - Processing a null session cookie can cause the web     server to become unresponsive. (CVE-2011-2012)

CVE-2011-1895

medium

Tenable Plugins

medium