CVE-2011-1895

no score yetEPSS 11%

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2011-10-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:forefront_unified_access_gateway

References

http://osvdb.org/76235
http://www.securityfocus.com/bid/49979
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064
http://osvdb.org/76235

Check your stack JSON