vulnerability

Microsoft SharePoint: CVE-2017-11775: Microsoft SharePoint Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:P/I:P/A:N)

Published

Oct 13, 2017

Added

May 15, 2023

Modified

Oct 14, 2025

Description

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820.

Solution

microsoft-sharepoint-sharepoint_2016-kb4011217

References

BID-101105
CVE-2017-11775
https://attackerkb.com/topics/CVE-2017-11775
CWE-79
https://support.microsoft.com/help/4011217

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report