Every CVE whose affected-product data names Apple Os X Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (11)
CVE-2016-4694 — CVSS 9.1 (critical): The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect…
CVE-2016-4754 — CVSS 7.5 (high): ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic…
CVE-2014-4424 — CVSS 7.5 (high): SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote…
CVE-2013-5143 — CVSS 6.8 (medium): The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which…
CVE-2014-4406 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to…
CVE-2015-1150 — CVSS 5.0 (medium): The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to…
CVE-2014-3583 — CVSS 5.0 (medium): The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers…
CVE-2015-1151 — CVSS 5.0 (medium): Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by…
CVE-2013-1034 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject…
CVE-2014-4446 — CVSS 2.1 (low): Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated…
CVE-2014-4447 — CVSS 1.9 (low): Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile…