Description
Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://support.apple.com/kb/HT6448
- macosx-cve20144406-xss(96047) vdb-entry
- APPLE-SA-2014-10-16-3 vendor-advisory
- 69935 vdb-entry
- http://www.cloudscan.me/2014/09/cve-2014-4406-apple-sa-2014-09-17-5-os.html
- https://support.apple.com/kb/HT6536
- 1030870 vdb-entry
- 61307 third-party-advisory