os x server · threatengine.sh

CVE-2016-4754

<= 5.1

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptograp

7.5HIGH

CVE-2016-4694

<= 5.1

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does no

9.1CRITICAL

CVE-2015-1151

<= 4.0

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages b

CVE-2015-1150

<= 4.0

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote atta

CVE-2014-3583

all versions

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCG

CVE-2014-4447

<= 3.1.2

Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) p

CVE-2014-4446

<= 3.1.2

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote auth

CVE-2014-4424

<= 2.2.2

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remo

CVE-2014-4406

<= 3.1.2

Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote atta

6.1MEDIUM

CVE-2013-5143

<= 2.2.2

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances

CVE-2013-1034

<= 2.2.1

Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to

apple os x server