CVE-2011-1895

CVE Database · CVE-2011-1895

CVE-2011-1895

· N/AModified

CVSS v3.1

N/A

EPSS

11.14%

Published

Oct 11, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."

Weaknesses (CWE)

CWE-94

Affected Products (4)

microsoft · forefront_unified_access_gatewayvulnerable

References (8)

http://osvdb.org/76235

http://www.securityfocus.com/bid/49979

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064

http://osvdb.org/76235

http://www.securityfocus.com/bid/49979

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064

KEV Catalog EPSS Scores Vendors All CVEs