Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document.
Conclusion & alert: CVE-2015-5911 is rated Moderate Risk (60.6/100): CVSS Critical severity, with medium exploitation likelihood (EPSS 0.39%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-06-19 | 0.55% | 0.39% | -0.16% |
| 2 | 2025-03-30 | 0.87% | 0.55% | -0.32% |
| 3 | 2025-03-29 | — | 0.87% | — |
Full EPSS history (6 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| apple | mac_os_x_server | <= 5.0.2 | cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html | Vendor Advisory |
| http://www.securitytracker.com/id/1033595 | |
| https://support.apple.com/HT205219 | Vendor Advisory |