Vulnerabilities > Apple > OS X Server > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-09-25 | CVE-2016-4754 | Cryptographic Issues vulnerability in Apple OS X Server ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. | 5.0 |
| 2015-04-28 | CVE-2015-1151 | Improper Access Control vulnerability in Apple OS X Server Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client. | 5.0 |
| 2015-04-28 | CVE-2015-1150 | Code vulnerability in Apple OS X Server The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended. | 5.0 |
| 2014-09-19 | CVE-2014-4406 | Cross-Site Scripting vulnerability in Apple OS X Server Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2013-10-24 | CVE-2013-5143 | Certificate Validation Security Bypass vulnerability in Apple Mac OS X Server The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate. network apple | 6.8 |
| 2013-09-19 | CVE-2013-1034 | Cross-Site Scripting vulnerability in Apple OS X Server Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |