CVE-2017-11761: Microsoft Exchange Server

Medium severity, CVSS 5.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"

Affected products

• Microsoft Exchange Server: version 2013 only; version 2016 only

Published 2017-09-13. Last modified 2026-06-17.