CVE-2018-12571

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.

• CWE-918

• http://packetstormsecurity.com/files/148389/Microsoft-Forefront-Unified-Access-Gateway-2010-External-DNS-Interaction.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/2Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Jul/7Exploit, Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1041212Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/148389/Microsoft-Forefront-Unified-Access-Gateway-2010-External-DNS-Interaction.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/2Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Jul/7Exploit, Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1041212Third Party Advisory, VDB Entry

Published

Jul 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12561An issue was discovered in the cantata-mounter D-Bus service…
• CVE-2018-12562An issue was discovered in the cantata-mounter D-Bus service…
• CVE-2018-12563An issue was discovered in Linaro LAVA before 2018.5.post1. …
• CVE-2018-12564An issue was discovered in Linaro LAVA before 2018.5.post1. …
• CVE-2018-12565An issue was discovered in Linaro LAVA before 2018.5.post1. …8.8
• CVE-2018-1257Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.…6.5
• CVE-2018-12572Avast Free Antivirus prior to 19.1.2360 stores user credenti…
• CVE-2018-12574CSRF exists for all actions in the web interface on TP-Link …
• CVE-2018-12575On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 1…
• CVE-2018-12576TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 1801…
• CVE-2018-12577The Ping and Traceroute features on TP-Link TL-WR841N v13 00…
• CVE-2018-12578There is a heap-based buffer overflow in bmp_compress1_row i…