Product by Apache Software Foundation

Apache Guacamole

13 known vulnerabilities in Apache Guacamole (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apache Guacamole (Apache Software Foundation)

High	CVE-2019-19603	SQLite: security vulnerability also in 5 other products	7.5	09.12.2019
High	CVE-2021-43999	Improper validation of SAML responses also in 1 other product	8.8	11.01.2022
High	CVE-2018-1340	Apache Guacamole: security vulnerability also in 1 other product	7.5	07.02.2019
Medium	CVE-2021-41767	Private tunnel identifier may be included in the non-private details of active connections also in 1 other product	6.5	11.01.2022
Medium	CVE-2016-1566	Apache Guacamole: Cross-Site Scripting (XSS)	5.4	02.02.2017
High	CVE-2017-3158	Apache Guacamole: Race Condition also in 1 other product	8.1	18.01.2018
High	CVE-2023-30576	Apache Guacamole: Use-after-free in handling of RDP audio input buffer also in 1 other product	6.8	07.06.2023
High	CVE-2023-43826	Apache Guacamole: Integer overflow in handling of VNC image buffers also in 1 other product	7.5	19.12.2023
High	CVE-2023-30575	Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths also in 1 other product	6.5	07.06.2023
Medium	CVE-2020-11997	Apache Guacamole: security vulnerability	4.3	19.01.2021
High	CVE-2024-35164	Apache Guacamole: Improper input validation of console codes also in 1 other product	6.8	02.07.2025
Medium	CVE-2020-9498	Apache Guacamole: Memory Corruption also in 2 other products	6.7	02.07.2020
Medium	CVE-2020-9497	Apache Guacamole: security vulnerability also in 2 other products	4.4	02.07.2020