CVE-2017-11761

—

CVSS 3.0

5.3 medium

EPSS

7%p93

Published

Sep 13, 2017 (Sep 13, 2017)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"

Vendors: microsoft
Products: exchange server
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (6.6%)

In the news0 stories

No ingested article mentions this CVE yet.