{"id":"CVE-2017-11761","aliases":["EUVD-2017-3371","GHSA-pf3p-qjm3-w7j2"],"status":"published","title":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization...","description":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\"","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06559,"percentile":0.93859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-09-13T01:00:00Z","modified":"2026-06-17T01:02:19Z","products":[{"vendor":"microsoft","product":"exchange_server"},{"vendor":"microsoft","product":"microsoft exchange server"},{"vendor":"microsoft corporation","product":"microsoft exchange server"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1039320","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100731","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11761"},{"url":"https://github.com/advisories/GHSA-pf3p-qjm3-w7j2"}],"sources":{"cve":[{"id":"CVE-2017-11761","description":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\"","status":"published","published":"2017-09-13T01:00:00Z","modified":"2024-09-17T03:02:51.278Z","updated_at":"2026-11-02T14:33:20.171335Z"}],"euvd":[{"id":"EUVD-2017-3371","description":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\"","status":"published","published":"2017-09-13T01:00:00Z","modified":"2024-09-17T03:02:51Z","updated_at":"2026-11-03T00:28:35.090816Z"}],"ghsa":[{"id":"GHSA-pf3p-qjm3-w7j2","title":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization...","description":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\"","status":"published","published":"2022-05-17T00:50:34Z","modified":"2023-02-03T05:02:36Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:12.235581Z"}],"nvd":[{"id":"CVE-2017-11761","description":"Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka \"Microsoft Exchange Information Disclosure Vulnerability\"","status":"published","published":"2017-09-13T01:29:08.317Z","modified":"2026-06-17T01:02:19.517Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:58.85945Z"}]}}