CVE-2017-11761

5.3 mediumEPSS 6.6%

Medium (5.3) in microsoft exchange server. EPSS 6.6% chance of exploitation in the next 30 days.

Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 6.6% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:exchange_server

References

http://www.securityfocus.com/bid/100731
http://www.securitytracker.com/id/1039320
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761
http://www.securityfocus.com/bid/100731
http://www.securitytracker.com/id/1039320

Check your stack JSON