What’s Vulnerable › Vulnerabilities

CVE-2017-11761

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-13 · updated 2026-06-17
• Weakness: CWE-200

Description

Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"

Affected products

• Microsoft Exchange Server: 2013-cumulative_update_16, 2013-cumulative_update_17, 2013-sp1, 2016-cumulative_update_5, 2016-cumulative_update_6
• Microsoft Exchange Server: Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016

References

• http://www.securityfocus.com/bid/100731
• http://www.securitytracker.com/id/1039320
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761
• http://www.securityfocus.com/bid/100731
• http://www.securitytracker.com/id/1039320
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761

Get alerted when CVE-2017-11761 or the next vulnerability affects your stack