Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2017-11834
HistoryNov 15, 2017 - 3:29 a.m.

Information disclosure

2017-11-1503:29:00
PRIOn knowledge base
www.prio-n.com
5

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

4.2 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.5%

JSON

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user’s system, due to how the scripting engine handles objects in memory, aka “Scripting Engine Information Disclosure Vulnerability”. This CVE ID is unique from CVE-2017-11791.

Related

cve 2
prion 1
symantec 2
mscve 2
checkpoint_advisories 1
veracode 1
openvas 9
nessus 9
mskb 10
kaspersky 2
talosblog 1
trendmicroblog 1
cve
cve
CVE-2017-11791
2017-11-15 03:29:00
CVE-2017-11834
2017-11-15 03:29:00
prion
prion
Information disclosure
2017-11-15 03:29:00
symantec
symantec
Microsoft Internet Explorer CVE-2017-11834 Information Disclosure Vulnerability
2017-11-14 00:00:00
Microsoft Internet Explorer and Edge CVE-2017-11791 Information Disclosure Vulnerability
2017-11-14 00:00:00
mscve
mscve
Scripting Engine Information Disclosure Vulnerability
2017-11-14 08:00:00
Scripting Engine Information Disclosure Vulnerability
2017-11-14 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Browser Scripting Engine Information Disclosure (CVE-2017-11791)
2017-11-14 00:00:00
veracode
veracode
Information Disclosure
2018-12-11 03:35:02
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (KB4047206)
2017-11-15 00:00:00
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4048959)
2017-11-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4048958)
2017-11-15 00:00:00
nessus
nessus
Security Updates for Internet Explorer (November 2017)
2017-11-30 00:00:00
Windows Server 2012 November 2017 Security Updates
2017-11-14 00:00:00
Windows 8.1 and Windows Server 2012 R2 November 2017 Security Updates
2017-11-14 00:00:00
mskb
mskb
Cumulative security update for Internet Explorer: November 14, 2017
2017-11-14 08:00:00
November 14, 2017—KB4048959 (Monthly Rollup)
2017-11-14 08:00:00
November 14, 2017—KB4048958 (Monthly Rollup)
2017-11-14 08:00:00
kaspersky
kaspersky
KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)
2017-11-14 00:00:00
KLA11140 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
2017-11-14 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - November 2017
2017-11-14 11:54:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 13, 2017
2017-11-17 16:46:19

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

4.2 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.015 Low

EPSS

Percentile

86.5%

JSON
Related for PRION:CVE-2017-11834
cve2prion1symantec2mscve2checkpoint_advisories1veracode1openvas9nessus9mskb10kaspersky2talosblog1trendmicroblog1