Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Windows 10 Version 1607
Vendor
Microsoft
Product
Windows 10 Version 1607
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1607 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9612
Unavailable
None listed
Windows 10 Version 1809
Vendor
Microsoft
Product
Windows 10 Version 1809
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1809 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9376
Unavailable
None listed
Windows Server 2016
Vendor
Microsoft
Product
Windows Server 2016
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9612
Unavailable
None listed
Windows Server 2016 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2016 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.14393.0
affected
custom
10.0.14393.9612
Unavailable
None listed
Windows Server 2019
Vendor
Microsoft
Product
Windows Server 2019
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9376
Unavailable
None listed
Windows Server 2019 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2019 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.17763.0
affected
custom
10.0.17763.9376
Unavailable
None listed
Windows Server 2022
Vendor
Microsoft
Product
Windows Server 2022
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2022 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.20348.0
affected
custom
10.0.20348.5761
Unavailable
None listed
Windows Server 2025
Vendor
Microsoft
Product
Windows Server 2025
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2025 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.26100.0
affected
custom
10.0.26100.33650
Unavailable
None listed
Windows Server 2025 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2025 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2025 (Server Core installation) · Scoped product and version facts