Xen Project Xen

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-31144Xapi: Metadata injection attack against backup/restore functionalityLOW 3.80.2 %
CVE-2021-28703Branch 4.13 – 4.13grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of meHIGH 7.00.3 %