CVE-2011-1969: Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the Micros...

Security readout for executives and security teams

A vulnerable Microsoft Forefront UAG 2010 deployment could expose users to a signed Java applet that allows remote code execution on their client machines. The issue is client-impacting: compromise would occur on users who interact with the affected UAG component, not necessarily on the gateway itself. Exposure is likely limited to organizations still using affected Forefront UAG 2010 versions and the MicrosoftClient.jar Java applet path. Validate both server version and client applet delivery rather than assuming all UAG environments are affected. Treat as high priority if affected UAG 2010 is still in use. The business risk is endpoint compromise through remote code execution, but urgency depends on whether the legacy Java applet is still reachable by users. Mitigation focus: Review Microsoft MS11-079 for the vendor-specified security update.; Identify and prioritize affected UAG 2010 Gold, Update 1, Update 2, and SP1 systems.; Check whether MicrosoftClient.jar is still delivered to users..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.