本ページは apple os_x_server に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2016-4754 | ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. | [email protected] | 7.5 | 1.98% | 2016-09-25 | 2026-06-16 |
| CVE-2016-4694 | The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue, a related issue to CVE-2016-5387. | [email protected] | 9.1 | 1.34% | 2016-09-25 | 2026-06-16 |
| CVE-2015-1151 | Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client. | [email protected] | 5.0 | 1.86% | 2015-04-28 | 2026-06-16 |
| CVE-2015-1150 | The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended. | [email protected] | 5.0 | 1.97% | 2015-04-28 | 2026-06-16 |
| CVE-2014-3583 | The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers. | [email protected] | 5.0 | 10.50% | 2014-12-15 | 2026-06-16 |
| CVE-2014-4447 | Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs. | [email protected] | 1.9 | 0.33% | 2014-10-17 | 2026-06-16 |
| CVE-2014-4446 | Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator. | [email protected] | 2.1 | 1.41% | 2014-10-17 | 2026-06-16 |
| CVE-2014-4424 | SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | [email protected] | 7.5 | 2.35% | 2014-09-19 | 2026-06-16 |
| CVE-2014-4406 | Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 6.1 | 1.40% | 2014-09-19 | 2026-06-16 |
| CVE-2013-5143 | The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate. | [email protected] | 6.8 | 0.55% | 2013-10-24 | 2026-06-16 |
| CVE-2013-1034 | Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 4.3 | 2.03% | 2013-09-19 | 2026-06-16 |