Read the docs

Xen

Records542All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical29CVSS 9.0–10.0
CVSS high175CVSS 7.0–8.9

Exploited now

Xen records in CISA KEV

No Xen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xen 490 records MEDIUM Xapi 3 records LOW Qemu 1 record LOW Xen-unstable 1 record LOW Xen Flask Module 1 record LOW

Records

3 records in Xapi · all components

TI-2022-14867 CVE-2022-33749 · GHSA-v88g-q782-jgp2

Resource allocation without limits in Xapi

Priority LOW 26

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01175 Published 2022-10-11 No fix listed CWE-770
TI-2024-20524 CVE-2024-31144 · GHSA-fg38-pgj3-5w5f

Xapi: Metadata injection attack against backup/restore functionality

Priority LOW 17

For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview.html#object-model-overview Xapi contains functionality to backup and restore metadata about Virtual Machines and Storage Repos…

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00215 Published 2025-02-14 No fix listed CWE-829
Open these records in search →