{"schema_version":1,"title":"Citrix XenServer vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Citrix XenServer: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2017-5573, was published on 30 January 2017.","url":"https://junglewise.ai/threats/technologies/xenserver","json_url":"https://junglewise.ai/threats/technologies/xenserver.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/xenserver","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2017-5573","cvss":4.9,"slug":"cve-2017-5573-citrix-xenserver-authorization-bypass-in-xapi","title":"Citrix XenServer authorization bypass in xapi","severity":"medium","exploited":false,"published_at":"2017-01-30T16:59:00.177+00:00","url":"https://junglewise.ai/threats/cve-2017-5573-citrix-xenserver-authorization-bypass-in-xapi"},{"cve":"CVE-2017-5572","cvss":6.5,"slug":"cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation","title":"Citrix XenServer database corruption via xapi privilege escalation","severity":"medium","exploited":false,"published_at":"2017-01-30T16:59:00.147+00:00","url":"https://junglewise.ai/threats/cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation"},{"cve":"CVE-2016-10025","cvss":5.5,"slug":"cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm","title":"Xen VMFUNC emulation NULL pointer dereference on AMD SVM","severity":"medium","exploited":false,"published_at":"2017-01-26T15:59:00.237+00:00","url":"https://junglewise.ai/threats/cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm"},{"cve":"CVE-2016-10024","cvss":6,"slug":"cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86","title":"Xen denial of service via instruction stream modification in x86 PV guests","severity":"medium","exploited":false,"published_at":"2017-01-26T15:59:00.19+00:00","url":"https://junglewise.ai/threats/cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86"},{"cve":"CVE-2016-9386","cvss":7.8,"slug":"cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling","title":"Xen x86 emulator privilege escalation via NULL segment handling","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.957+00:00","url":"https://junglewise.ai/threats/cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling"},{"cve":"CVE-2016-9385","cvss":6,"slug":"cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service","title":"Xen x86 segment base write emulation denial of service","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:02.907+00:00","url":"https://junglewise.ai/threats/cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service"},{"cve":"CVE-2016-9383","cvss":8.8,"slug":"cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption","title":"Xen broken bit test instruction emulation memory corruption","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.86+00:00","url":"https://junglewise.ai/threats/cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption"},{"cve":"CVE-2016-9382","cvss":7.8,"slug":"cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode","title":"Xen x86 task switch privilege escalation in VM86 mode","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.83+00:00","url":"https://junglewise.ai/threats/cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode"},{"cve":"CVE-2016-9381","cvss":7.5,"slug":"cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing","title":"Xen QEMU race condition in shared ring processing","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.8+00:00","url":"https://junglewise.ai/threats/cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing"},{"cve":"CVE-2016-9380","cvss":7.5,"slug":"cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter","title":"Xen pygrub arbitrary file read and deletion via delimiter injection","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.753+00:00","url":"https://junglewise.ai/threats/cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter"},{"cve":"CVE-2016-9379","cvss":7.9,"slug":"cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output","title":"Xen pygrub delimiter injection in S-expression output","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.707+00:00","url":"https://junglewise.ai/threats/cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Citrix NetScaler Gateway","slug":"gateway","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/gateway"},{"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"name":"Citrix Application Delivery Controller (ADC)","slug":"application-delivery-controller-adc","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/application-delivery-controller-adc"},{"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"name":"Citrix Provisioning Services","slug":"provisioning-services","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/provisioning-services"},{"name":"Citrix Sd-Wan Wanop Appliance","slug":"sd-wan-wanop-appliance","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/sd-wan-wanop-appliance"}],"technology":{"hub":true,"name":"Citrix XenServer","slug":"xenserver","vendor":{"name":"Citrix","slug":"citrix","url":"https://junglewise.ai/threats/vendors/citrix"},"aliases":[],"category":"hypervisor","homepage":"https://www.xenserver.com/","repo_url":"https://github.com/xenserver","description":"A virtualization platform based on the Xen Project hypervisor for managing cloud and server workloads.","url":"https://junglewise.ai/threats/technologies/xenserver"},"most_severe":[{"cve":"CVE-2016-9383","cvss":8.8,"slug":"cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption","title":"Xen broken bit test instruction emulation memory corruption","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.86+00:00","url":"https://junglewise.ai/threats/cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption"},{"cve":"CVE-2016-9379","cvss":7.9,"slug":"cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output","title":"Xen pygrub delimiter injection in S-expression output","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.707+00:00","url":"https://junglewise.ai/threats/cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output"},{"cve":"CVE-2016-9386","cvss":7.8,"slug":"cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling","title":"Xen x86 emulator privilege escalation via NULL segment handling","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.957+00:00","url":"https://junglewise.ai/threats/cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling"},{"cve":"CVE-2016-9382","cvss":7.8,"slug":"cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode","title":"Xen x86 task switch privilege escalation in VM86 mode","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.83+00:00","url":"https://junglewise.ai/threats/cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode"},{"cve":"CVE-2016-9381","cvss":7.5,"slug":"cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing","title":"Xen QEMU race condition in shared ring processing","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.8+00:00","url":"https://junglewise.ai/threats/cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing"},{"cve":"CVE-2016-9380","cvss":7.5,"slug":"cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter","title":"Xen pygrub arbitrary file read and deletion via delimiter injection","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:02.753+00:00","url":"https://junglewise.ai/threats/cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter"},{"cve":"CVE-2017-5572","cvss":6.5,"slug":"cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation","title":"Citrix XenServer database corruption via xapi privilege escalation","severity":"medium","exploited":false,"published_at":"2017-01-30T16:59:00.147+00:00","url":"https://junglewise.ai/threats/cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation"},{"cve":"CVE-2016-10024","cvss":6,"slug":"cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86","title":"Xen denial of service via instruction stream modification in x86 PV guests","severity":"medium","exploited":false,"published_at":"2017-01-26T15:59:00.19+00:00","url":"https://junglewise.ai/threats/cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86"},{"cve":"CVE-2016-9385","cvss":6,"slug":"cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service","title":"Xen x86 segment base write emulation denial of service","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:02.907+00:00","url":"https://junglewise.ai/threats/cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service"},{"cve":"CVE-2016-10025","cvss":5.5,"slug":"cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm","title":"Xen VMFUNC emulation NULL pointer dereference on AMD SVM","severity":"medium","exploited":false,"published_at":"2017-01-26T15:59:00.237+00:00","url":"https://junglewise.ai/threats/cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}