CVE-2010-2732
Last modified
CVE-2010-2732 is a vulnerability of currently unknown severity. Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability.". EPSS estimates a 13.67% chance of exploitation in the next 30 days.
Description
Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Forefront Unified Access Gateway | 2010 |
References
- http://www.us-cert.gov/cas/techalerts/TA10-313A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA10-313A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-2732?
How severe is CVE-2010-2732?
How do I fix CVE-2010-2732?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2726Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-2727Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-2728Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 20…
- CVE-2010-2729The Print Spooler service in Microsoft Windows XP SP2 and SP…
- CVE-2010-2730Buffer overflow in Microsoft Internet Information Services (…
- CVE-2010-2731Unspecified vulnerability in Microsoft Internet Information …
- CVE-2010-2733Cross-site scripting (XSS) vulnerability in the Web Monitor …
- CVE-2010-2734Cross-site scripting (XSS) vulnerability in the mobile porta…
- CVE-2010-2735Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-2736Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-2737Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-2738The Uniscribe (aka new Unicode Script Processor) implementat…
Are you affected by CVE-2010-2732?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST