Xenserver

This hub aggregates every CVE we track for Xenserver, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Xenserver.

• CVE-2026-42486Multiple RBAC issues in XAPI8.5Jul 9, 2026
• CVE-2026-23562Multiple RBAC issues in XAPI8.5Jul 9, 2026
• CVE-2026-23561Multiple RBAC issues in XAPI9.9Jul 9, 2026
• CVE-2026-23560Multiple RBAC issues in XAPI9.9Jul 9, 2026
• CVE-2026-23559Multiple RBAC issues in XAPI9.9Jul 9, 2026
• CVE-2024-5661Potential Denial of Service affecting XenServer and Citrix Hypervisor6.0Jun 13, 2024
• CVE-2022-21125Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.5.5Jun 15, 2022
• CVE-2012-4606Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with a...7.8Jan 23, 2020
• CVE-2014-3798The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame.6.5Jul 11, 2019
• CVE-2018-19965An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the ...5.6Dec 8, 2018
• CVE-2018-19962An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.7.8Dec 8, 2018
• CVE-2018-19961An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.7.8Dec 8, 2018
• CVE-2018-17190In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execu...9.8Nov 19, 2018
• CVE-2018-14007Citrix XenServer 7.1 and newer allows Directory Traversal.9.8Aug 15, 2018
• CVE-2016-9603A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after ...5.5Jul 27, 2018