The Linux Foundation XenServer

Name: The Linux Foundation XenServer
Brand: The Linux Foundation

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical3high2medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-14007US	critical9.8	47.3% (99th)	—	no fix	2018-08-15	3 versions
CVE-2018-17190US	critical9.8	8.79% (95th)	—	no fix	2018-11-19	≤ 7.6
CVE-2022-21125US	medium5.5	6.45% (94th)	—	no fix	2022-06-15	≤ 7.1
CVE-2016-9383US	high8.8	0.51% (43rd)	—	no fix	2017-01-23	4 versions
CVE-2017-12134US	high8.8	0.50% (42nd)	—	no fix	2017-08-24	6 versions
CVE-2017-12137US	high8.8	0.44% (38th)	—	no fix	2017-08-24	6 versions
CVE-2024-5661US	medium6.0	0.17% (6th)	—	no fix	2024-06-13	≤ 8
CVE-2026-42486US	—	0.17% (6th)	—	no fix	2026-07-09	≤ 8.4
CVE-2026-23562US	—OT elevated	0.17% (6th)	—	no fix	2026-07-09	≤ 8.4
CVE-2026-23561US	—	0.17% (6th)	—	no fix	2026-07-09	≤ 8.4
CVE-2026-23560US	—	0.17% (6th)	—	no fix	2026-07-09	≤ 8.4
CVE-2026-23559US	—	0.17% (6th)	—	no fix	2026-07-09	≤ 8.4

The flaw types (CWEs) most of these CVEs share.

CWE-250Execution with Unnecessary Privileges5 CVEs
CWE-284Improper Access Control4 CVEs
CWE-264CWE-2642 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.