CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-0159

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.049

EPSS Ranking 89.2%

CVSS Severity

CVSS v3 Score 3.7

CVSS v2 Score 4.3

References

Products affected by CVE-2017-0159

Microsoft » Windows 10 » Version: 1607

cpe:2.3:o:microsoft:windows_10:1607
Microsoft » Windows 10 » Version: 1703

cpe:2.3:o:microsoft:windows_10:1703
Microsoft » Windows Server 2012 » Version: r2

cpe:2.3:o:microsoft:windows_server_2012:r2
Microsoft » Windows Server 2016 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2016:-
Microsoft » Windows Server 2016 » Version: 10.0.14393.4467

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4467
Microsoft » Windows Server 2016 » Version: 10.0.14393.4530

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4530
Microsoft » Windows Server 2016 » Version: 10.0.14393.4583

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4583
Microsoft » Windows Server 2016 » Version: 10.0.14393.4651

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4651
Microsoft » Windows Server 2016 » Version: 10.0.14393.4704

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4704
Microsoft » Windows Server 2016 » Version: 10.0.14393.4770

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4770
Microsoft » Windows Server 2016 » Version: 10.0.14393.4886

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4886
Microsoft » Windows Server 2016 » Version: 10.0.14393.4946

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4946
Microsoft » Windows Server 2016 » Version: 10.0.14393.5066

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5066
Microsoft » Windows Server 2016 » Version: 10.0.14393.5125

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5125
Microsoft » Windows Server 2016 » Version: 10.0.14393.5192

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5192
Microsoft » Windows Server 2016 » Version: 10.0.14393.5246

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5246
Microsoft » Windows Server 2016 » Version: 10.0.14393.5291

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5291
Microsoft » Windows Server 2016 » Version: 10.0.14393.5356

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5356
Microsoft » Windows Server 2016 » Version: 10.0.14393.5427

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5427
Microsoft » Windows Server 2016 » Version: 10.0.14393.5501

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5501
Microsoft » Windows Server 2016 » Version: 10.0.14393.5582

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5582
Microsoft » Windows Server 2016 » Version: 10.0.14393.5648

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5648
Microsoft » Windows Server 2016 » Version: 10.0.14393.5717

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5717
Microsoft » Windows Server 2016 » Version: 10.0.14393.5850

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5850
Microsoft » Windows Server 2016 » Version: 10.0.14393.6085

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6085
Microsoft » Windows Server 2016 » Version: 10.0.14393.6167

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6167
Microsoft » Windows Server 2016 » Version: 10.0.14393.6351

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6351
Microsoft » Windows Server 2016 » Version: 10.0.14393.6452

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6452
Microsoft » Windows Server 2016 » Version: 10.0.14393.6614

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6614
Microsoft » Windows Server 2016 » Version: 10.0.14393.6796

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6796
Microsoft » Windows Server 2016 » Version: 10.0.14393.6897

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6897
Microsoft » Windows Server 2016 » Version: 10.0.14393.6981

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6981
Microsoft » Windows Server 2016 » Version: 10.0.14393.7070

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7070
Microsoft » Windows Server 2016 » Version: 10.0.14393.7159

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7159
Microsoft » Windows Server 2016 » Version: 10.0.14393.7259

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7259
Microsoft » Windows Server 2016 » Version: 10.0.14393.7336

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7336
Microsoft » Windows Server 2016 » Version: 10.0.14393.7428

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7428
Microsoft » Windows Server 2016 » Version: 10.0.14393.7515

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7515
Microsoft » Windows Server 2016 » Version: 10.0.14393.7606

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7606
Microsoft » Windows Server 2016 » Version: 10.0.14393.7699

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7699
Microsoft » Windows Server 2016 » Version: 10.0.14393.7876

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7876
Microsoft » Windows Server 2016 » Version: 10.0.14393.7969

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7969
Microsoft » Windows Server 2016 » Version: 10.0.14393.8066

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8066
Microsoft » Windows Server 2016 » Version: 10.0.14393.8148

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8148
Microsoft » Windows Server 2016 » Version: 10.0.14393.8246

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8246
Microsoft » Windows Server 2016 » Version: 10.0.14393.8330

cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.8330
Microsoft » Windows Server 2016 » Version: 1709

cpe:2.3:o:microsoft:windows_server_2016:1709
Microsoft » Windows Server 2016 » Version: 1803

cpe:2.3:o:microsoft:windows_server_2016:1803
Microsoft » Windows Server 2016 » Version: 1903

cpe:2.3:o:microsoft:windows_server_2016:1903
Microsoft » Windows Server 2016 » Version: 1909

cpe:2.3:o:microsoft:windows_server_2016:1909
Microsoft » Windows Server 2016 » Version: 2004

cpe:2.3:o:microsoft:windows_server_2016:2004
Microsoft » Windows Server 2016 » Version: 20h2

cpe:2.3:o:microsoft:windows_server_2016:20h2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-0159

Products

Pricing

Contact Us