High severity8.8NVD Advisory· Published Dec 12, 2017· Updated Jun 17, 2026

CVE-2017-11936

Description

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability".

Affected products

Microsoft/Sharepoint Server2 versions
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
- (no CPE)
Microsoft/SharePoint Enterprise Server 2016llm-fuzzy
Microsoft Corporation/Microsoft SharePointv5
Range: Microsoft SharePoint Enterprise Server 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11936nvdIssue TrackingPatchVendor Advisory
www.securityfocus.com/bid/102068nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039995nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000