Back to CVE Browser

CVE-2017-11876

HIGH

8.8

CVSS Severity Score

EPSS Score0.0930%

EPSS Percentile19.50th

PublishedNov 15, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability".

Affected Platforms (CPE)

📦

Microsoft

Project Server

= 2013

📦

Microsoft

Sharepoint Enterprise Server

= 2016

References & Advisories

🔗 http://www.securityfocus.com/bid/101754

🔗 http://www.securitytracker.com/id/1039788

🔗 http://www.securitytracker.com/id/1039789

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11876

🔗 http://www.securityfocus.com/bid/101754

🔗 http://www.securitytracker.com/id/1039788

🔗 http://www.securitytracker.com/id/1039789

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11876

Related Vulnerabilities

CVE-2021-4422810.0

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration...

CVE-2011-451310.0

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels S...

CVE-2004-176310.0

Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of ser...

CVE-2020-151499.9

NodeBB before version 1.14.3 has a bug introduced in version 1.12.2 in the validation logic that makes it possible to change the p...