Open Source Xen

Name: Open Source Xen
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical3high7medium1low

updated 2026-10-24

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-2193US	—	1.28% (70th)	Exploit	4.17	2024-03-15	4 versions
CVE-2025-54505US	—	0.19% (8th)	Exploit	xsa488-4.18.patch	2026-04-27	4 versions
CVE-2024-31142US	—	17.4% (97th)	—	4.16.6	2024-05-16	4 versions
CVE-2023-46842US	—	8.53% (95th)	—	4.16.6	2024-05-16	4 versions
CVE-2022-4949US	high8.8	2.18% (82nd)	—	4.15	2023-06-07	3 versions
CVE-2023-34324US	medium4.9	1.15% (67th)	—	4.15	2024-01-05	3 versions
CVE-2023-46839US	—	0.80% (56th)	—	xsa449-4.16.patch	2024-03-20	3 versions
CVE-2025-27465US	—	0.70% (53rd)	—	no fix	2025-07-16	≤ x86 <4.17
CVE-2024-45817US	—	0.54% (45th)	—	xsa462.patch	2024-09-25	< xsa462.patch
CVE-2024-31143US	—	0.51% (42nd)	—	no fix	2024-07-18	≤ Xapi <v1.249.x
CVE-2025-58144US	—	0.45% (38th)	—	no fix	2025-09-11	≥ 4.13
CVE-2025-58149US	—	0.43% (37th)	—	xsa476.patch	2025-10-31	3 versions
CVE-2025-58148US	—	0.38% (31st)	—	xsa475-2.patch	2025-10-31	4 versions
CVE-2025-58147US	—	0.38% (31st)	—	xsa475-1.patch	2025-10-31	4 versions
CVE-2025-58145US	—	0.35% (28th)	—	no fix	2025-09-11	≥ 4.13
CVE-2023-34325US	high7.8	0.29% (21st)	—	4.16	2024-01-05	3 versions
CVE-2025-54518US	—	0.29% (20th)	—	no fix	2026-05-15	≤ vers:unknown/*
CVE-2023-46835US	medium5.5	0.28% (20th)	—	4.15.x	2024-01-05	3 versions
CVE-2023-34326US	high7.8	0.27% (19th)	—	4.16	2024-01-05	3 versions
CVE-2023-34328US	medium5.5	0.27% (19th)	—	4.15	2024-01-05	3 versions
CVE-2023-34327US	medium5.5	0.27% (19th)	—	4.16	2024-01-05	3 versions
CVE-2023-46841US	—	0.27% (18th)	—	4.15	2024-03-20	< 4.15
CVE-2023-46840US	—	0.26% (17th)	—	no fix	2024-03-20	2 versions
CVE-2023-34321US	low3.3	0.26% (17th)	—	xsa437.patch	2024-01-05	2 versions
CVE-2023-46836US	medium4.7	0.25% (15th)	—	4.15.x	2024-01-05	< 4.15.x
CVE-2023-34323US	medium5.5	0.24% (15th)	—	4.15	2024-01-05	3 versions
CVE-2023-34320US	medium5.5	0.24% (14th)	—	4.17.1-9.fc38	2023-12-08	2 versions
CVE-2024-31146US	—	0.24% (14th)	—	4.16.x	2024-09-25	< 4.16.x
CVE-2024-31145US	—	0.23% (13th)	—	4.16.x	2024-09-25	< 4.16.x
CVE-2024-31144US	—	0.21% (11th)	—	no fix	2025-02-14	≤ Xapi <v1.249.x
CVE-2026-42490US	—	0.20% (9th)	—	no fix	2026-06-18	≥ 4.15
CVE-2025-27464US	—OT elevated	0.16% (5th)	—	9.4.1	2026-07-09	< 9.4.1
CVE-2025-27463US	—OT elevated	0.16% (5th)	—	9.4.1	2026-07-09	< 9.4.1
CVE-2025-27462US	—OT elevated	0.16% (5th)	—	9.4.1	2026-07-09	< 9.4.1
CVE-2025-58150US	—	0.14% (3rd)	—	4.18.x	2026-01-28	3 versions
CVE-2026-23553US	—	0.14% (3rd)	—	4.18.x	2026-01-28	< 4.18.x
CVE-2025-58151US	—	0.14% (3rd)	—	xsa478.patch	2026-07-09	3 versions
CVE-2026-23554US	—	0.13% (2nd)	—	no fix	2026-03-23	≥ 4.18
CVE-2026-23558US	—	0.12% (2nd)	—	no fix	2026-05-19	≥ 4.2
CVE-2026-42487US	—	0.10% (1st)	—	no fix	2026-06-18	2 versions
CVE-2026-42489US	—	0.08% (0th)	—	no fix	2026-06-18	≥ 4.15
CVE-2026-42491US	—	—	—	xsa498.patch	—	< xsa498.patch

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference5 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs
CWE-667Improper Locking4 CVEs
CWE-264CWE-2643 CVEs
CWE-276Incorrect Default Permissions3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)41 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan