CVEvulnerability
CVE-2017-11761
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"
Affected configurations
• microsoft exchange server 2013
• microsoft exchange server 2016
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/100731 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039320 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/100731 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039320 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761 Patch, Vendor Advisory