Xen-orchestra Xo-server — known CVE vulnerabilities

Every CVE whose affected-product data names Xen-orchestra Xo-server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-36383 — CVSS 4.3 (medium): Xen Orchestra (with xo-web through 5.80.0 and xo-server through 5.84.0) mishandles authorization, as demonstrated by modified WebSocket…