CVE-2014-4424 SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple os x server | <= 2.2.2 | No fix listed |
| apple os x server | = 2.0 | No fix listed |
| apple os x server | = 2.1 | No fix listed |
| apple os x server | = 2.1.1 | No fix listed |
| apple os x server | = 2.2 | No fix listed |
| apple os x server | = 2.2.1 | No fix listed |
| apple os x server | = 3.0 | No fix listed |
| apple os x server | = 3.0.1 | No fix listed |
| apple os x server | = 3.0.2 | No fix listed |
| apple os x server | = 3.0.3 | No fix listed |
| apple os x server | = 3.1 | No fix listed |
| apple os x server | = 3.1.1 | No fix listed |
| apple os x server | = 3.1.2 | No fix listed |
References
- APPLE-SA-2014-10-16-3 vendor-advisory
- 61305 third-party-advisory
- 61307 third-party-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- 69918 vdb-entry
- 1030869 vdb-entry
- macosx-cve20144424-sql-injection(96048) vdb-entry
- support.apple.com