Known vulnerabilities in Citrix XenServer - page 2

Vendor: Citrix
Software: Citrix XenServer
Software CPE: cpe:2.3:a:citrix:citrix_xenserver:*:*:*:*:*:*:*:*
Website: https://www.citrix.com/
Total vulnerabilities: 45
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix XenServer Citrix XenServer is affected by 45 known vulnerabilities: 1 high, 16 medium, 28 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122071 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-58151		 CWE-367 Low
No
No
 - 27.01.2026 SB2026012780
SB2026012786
#VU117652 - Insufficient Entropy
CVE-2025-62626		 CWE-331 Low
No
No
 - 24.10.2025 SB2025102470
SB2025120853
SB2025122706
and 21 more
#VU117433 - Out-of-bounds read
CVE-2025-58148		 CWE-125 Medium
No
No
 - 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU117432 - Out-of-bounds write
CVE-2025-58147		 CWE-787 Medium
No
No
 - 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU115009 - Improper input validation
CVE-2025-58146		 CWE-20 Medium
No
No
 - 09.09.2025 SB2025090954
SB2025090955
#VU115006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-58143		 CWE-362 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115005 - NULL Pointer Dereference
CVE-2025-58142		 CWE-476 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115004 - NULL Pointer Dereference
CVE-2025-27466		 CWE-476 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU112090 - Error Handling
CVE-2025-27465		 CWE-388 Medium
No
No
 - 01.07.2025 SB2025070176
SB2025070285
SB2025080601
and 2 more
#VU109854 - Exposed Dangerous Method or Function
CVE-2025-27464		 CWE-749 Low
No
No
 9.4.1 27.05.2025 SB2025052749
SB2025052759
#VU109853 - Exposed Dangerous Method or Function
CVE-2025-27463		 CWE-749 Low
No
No
 9.4.1 27.05.2025 SB2025052749
SB2025052759
#VU109852 - Exposed Dangerous Method or Function
CVE-2025-27462		 CWE-749 Low
No
No
 9.4.1 27.05.2025 SB2025052749
SB2025052759
#VU109619 - Improper Verification of Cryptographic Signature
CVE-2024-36347		 CWE-347 Low
No
No
 - 21.05.2025 SB20250521149
SB2025052618
SB2025071509
and 20 more
#VU109000 - Resource Management Errors
CVE-2024-28956		 CWE-399 High
No
No
 - 13.05.2025 SB2025051308
SB2025051309
SB2025051320
and 46 more
#VU100325 - Improper Locking
CVE-2024-45818		 CWE-667 Medium
No
No
 - 12.11.2024 SB20241112118
SB20241112131
SB2024111303
and 12 more
#VU97680 - Deadlock
CVE-2024-45817		 CWE-833 Low
No
No
 - 24.09.2024 SB2024092463
SB2024092464
SB2024092466
and 16 more
#VU65672 - NULL Pointer Dereference
CVE-2022-24809		 CWE-476 Low
No
No
 - 21.07.2022 SB2022072138
SB2022072139
SB2022080133
and 17 more
#VU65671 - Out-of-bounds write
CVE-2022-24805		 CWE-787 Medium
No
No
 - 21.07.2022 SB2022072138
SB2022072139
SB2022080133
and 19 more


Showing elements 21 - 40 out of 45