CVE-2011-1969: Microsoft Forefront Unified Access Gateway

High severity, CVSS 9.3. EPSS: 17.3% chance of exploitation in the next 30 days.

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."

Affected products

• Microsoft Forefront Unified Access Gateway: version 2010 only

Published 2011-10-12. Last modified 2026-06-16.