Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2017-11927
HistoryDec 12, 2017 - 9:29 p.m.

Information disclosure

2017-12-1221:29:00
PRIOn knowledge base
www.prio-n.com
6

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.036 Low

EPSS

Percentile

91.4%

JSON

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow an information vulnerability due to the way the Windows its:// protocol handler determines the zone of a request, aka “Microsoft Windows Information Disclosure Vulnerability”.

Related

cve 1
mscve 1
symantec 1
mskb 13
checkpoint_advisories 1
trellix 2
nessus 9
kaspersky 2
threatpost 1
openvas 13
talosblog 1
trendmicroblog 1
cve
cve
CVE-2017-11927
2017-12-12 21:29:00
mscve
mscve
Microsoft Windows Information Disclosure Vulnerability
2017-12-12 08:00:00
symantec
symantec
Microsoft Windows CVE-2017-11927 Information Disclosure Vulnerability
2017-12-12 00:00:00
mskb
mskb
Description of the security update for the Windows information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: May 08, 2018
2017-12-12 08:00:00
Description of the security update for the information disclosure vulnerability in Windows Server 2008: December 12, 2017
2017-12-06 00:00:00
May 8, 2018—KB4103726 (Security-only update)
2018-05-08 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows ITS Protocol Information Disclosure (CVE-2017-11927)
2018-01-03 00:00:00
trellix
trellix
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
nessus
nessus
Windows 2008 December 2017 Multiple Security Updates
2017-12-12 00:00:00
Windows Server 2012 December 2017 Security Updates
2017-12-12 00:00:00
Windows 8.1 and Windows Server 2012 R2 December 2017 Security Updates
2017-12-12 00:00:00
kaspersky
kaspersky
KLA11156 Multiple vulnerabilities in Microsoft Windows
2017-12-12 00:00:00
KLA10918 Multiple vulnerabilities in Microsoft Products (ESU)
2017-12-12 00:00:00
threatpost
threatpost
Microsoft December Patch Tuesday Update Fixes Six Critical Bugs
2017-12-12 17:12:36
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4054519)
2017-12-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4054518)
2017-12-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4053581)
2017-12-13 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - December 2017
2017-12-12 15:32:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 11, 2017
2017-12-15 16:06:45

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.036 Low

EPSS

Percentile

91.4%

JSON
Related for PRION:CVE-2017-11927
cve1mscve1symantec1mskb13checkpoint_advisories1trellix2nessus9kaspersky2threatpost1openvas13talosblog1trendmicroblog1