OX
Product
OS X Server
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 4.1.5 |
| CVE-2016-4694 | 9.1 | Sep 25 | The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of… Affected: through 5.1 |
| CVE-2016-4754 | 7.5 | Sep 25 | ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors Affected: through 5.1 |
| CVE-2014-4406 | 6.1 | Sep 19 | Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 3.1.2; 2.0; 2.1; 2.1.1; 2.2; 2.2.1; +7 more |
| CVE-2015-1151 | – | Apr 28 | Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client Affected: through 4.0 |
| CVE-2015-1150 | – | Apr 28 | The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by… Affected: through 4.0 |
| CVE-2014-3583 | – | Dec 15 | The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer… Affected: 5.0.3 |
| CVE-2014-4447 | – | Oct 18 | Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs Affected: through 3.1.2 |
| CVE-2014-4446 | – | Oct 18 | Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access… Affected: through 3.1.2 |
| CVE-2014-4424 | – | Sep 19 | SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands… Affected: through 2.2.2; 2.0; 2.1; 2.1.1; 2.2; 2.2.1; +7 more |
| CVE-2013-5143 | – | Oct 24 | The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers… Affected: through 2.2.2; 2.0; 2.1; 2.1.1; 2.2; 2.2.1 |
| CVE-2013-1034 | – | Sep 19 | Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via… Affected: through 2.2.1; 2.0; 2.1; 2.1.1; 2.2.0 |
Showing 12