High

DATE	CVE	VULNERABILITY TITLE	RISK
2016-09-25	CVE-2016-4694	Improper Access Control vulnerability in Apple mac OS X and OS X Server The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue, a related issue to CVE-2016-5387. network low complexity apple CWE-284	7.5
2014-09-19	CVE-2014-4424	SQL Injection vulnerability in Apple OS X Server SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. network low complexity apple CWE-89	7.5