CVE Feed

    Dashboard / CVE / CVE-2014-4424

    CVE-2014-4424

    SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    Published:Sep 19, 2014
    Last Modified:Apr 12, 2025
    EPS:Sep 19, 2014
    EPSS Score:0.01162
    CVSS Score:7.5

    Affected Products

    Vendor
    Apple
    Product
    Os X Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2016-4754 (CVSS 7.5) — ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers …
    CVE-2016-4694 (CVSS 9.1) — The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 a…
    CVE-2015-1151 (CVSS 5) — Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activit…
    CVE-2015-1150 (CVSS 5) — The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, whic…
    CVE-2014-4447 (CVSS 1.9) — Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading …
    CVE-2014-4446 (CVSS 2.1) — Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, whic…
    CVE-2014-3583 (CVSS 5) — The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 …
    CVE-2014-4406 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.…
    CVE-2013-5143 (CVSS 6.8) — The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspe…
    CVE-2013-1034 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High