CVE-2017-11936

8.8 highEPSS 4.2%

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-12-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:sharepoint_enterprise_server

References

http://www.securityfocus.com/bid/102068
http://www.securitytracker.com/id/1039995
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936
http://www.securityfocus.com/bid/102068
http://www.securitytracker.com/id/1039995

Check your stack JSON