Back to CVE Browser

CVE-2017-11936

HIGH

8.8

CVSS Severity Score

EPSS Score0.0210%

EPSS Percentile0.20th

PublishedDec 12, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".

Affected Platforms (CPE)

📦

Microsoft

Sharepoint Enterprise Server

= 2016

References & Advisories

🔗 http://www.securityfocus.com/bid/102068

🔗 http://www.securitytracker.com/id/1039995

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936

🔗 http://www.securityfocus.com/bid/102068

🔗 http://www.securitytracker.com/id/1039995

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936

Related Vulnerabilities

CVE-2018-09138.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2018-09148.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2017-118768.8

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read conte...

CVE-2018-09098.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...