MEDIUM
Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Published Sep 19, 2014
6.1
MEDIUMCVSS 3.0
EPSS 1.40%
Description
Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
No data.
OR
- ≤ 3.1.2
- 2.0
- 2.1
- 2.1.1
- 2.2
- 2.2.1
- 2.2.2
- 3.0
- 3.0.1
- 3.0.2
- 3.0.3
- 3.1
- 3.1.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (9)
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html vendor-advisoryx_refsource_APPLE
- http://secunia.com/advisories/61307 third-party-advisoryx_refsource_SECUNIA
- http://support.apple.com/kb/HT6448 x_refsource_CONFIRMVendor Advisory
- http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html x_refsource_MISC
- http://www.securityfocus.com/bid/69935 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id/1030870 vdb-entryx_refsource_SECTRACK
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4333 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96047 vdb-entryx_refsource_XF
- https://support.apple.com/kb/HT6536 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html | vendor-advisoryx_refsource_APPLE | |
| http://secunia.com/advisories/61307 | third-party-advisoryx_refsource_SECUNIA | |
| http://support.apple.com/kb/HT6448 | x_refsource_CONFIRMVendor Advisory | |
| http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html | x_refsource_MISC | |
| http://www.securityfocus.com/bid/69935 | vdb-entryx_refsource_BID | |
| http://www.securitytracker.com/id/1030870 | vdb-entryx_refsource_SECTRACK | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-4333 | Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/96047 | vdb-entryx_refsource_XF | |
| https://support.apple.com/kb/HT6536 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Sep 19, 2014
Updated Aug 6, 2024
Reserved Jun 20, 2014
Link CVE-2014-4406
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2014-4333 Assigner apple
Published Sep 19, 2014
Updated Aug 6, 2024
Exploited since n/a
Link EUVD-2014-4333