Xenserver
57 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Xenserver, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
Xenserver CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 5 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 57 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical8
- High22
- Medium24
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Xenserver.
- CVE-2026-42486Multiple RBAC issues in XAPI8.5
- CVE-2026-23562Multiple RBAC issues in XAPI8.5
- CVE-2026-23561Multiple RBAC issues in XAPI9.9
- CVE-2026-23560Multiple RBAC issues in XAPI9.9
- CVE-2026-23559Multiple RBAC issues in XAPI9.9
- CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix Hypervisor6.0
- CVE-2022-21125Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.5.5
- CVE-2012-4606Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with a...7.8
- CVE-2014-3798The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame.6.5
- CVE-2018-19965An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the ...5.6
- CVE-2018-19962An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.7.8
- CVE-2018-19961An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.7.8
- CVE-2018-17190In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execu...9.8
- CVE-2018-14007Citrix XenServer 7.1 and newer allows Directory Traversal.9.8
- CVE-2016-9603A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after ...5.5
Product grouping is registry-driven, with AI assist and human review. How it works