- How many CVEs does Xen Project have?
- Xen Project has 543 published CVE records since 2007, including 61 in the last two years.
- How many Xen Project CVEs are in CISA KEV?
- None of Xen Project's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which Xen Project products have the most CVEs?
- The Xen Project products with the most published CVEs are xen, XAPI, Xen hypervisor, Windows PV drivers, oxenstored.
- What are the most common weakness types in Xen Project CVEs?
- Xen Project's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-264, CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
- Are there public exploits for Xen Project vulnerabilities?
- Yes — 20 of Xen Project's CVEs have a known public exploit.
- How many critical Xen Project vulnerabilities are there?
- Xen Project has 28 critical and 174 high-severity CVEs.
- What is the average severity of Xen Project CVEs?
- The average CVSS base score across Xen Project's scored CVEs is 6.3.
