Known vulnerabilities in Guacamole

Vendor: Apache Foundation
Software: Guacamole
Software CPE: cpe:2.3:a:apache_foundation:guacamole:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Guacamole Guacamole is affected by 9 known vulnerabilities: 1 high, 5 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112153 - Improper input validation
CVE-2024-35164		 CWE-20 Medium
No
No
 1.6.0 03.07.2025 SB2025070347
SB2025070348
SB2025070349
and 5 more
#VU86014 - Use After Free
CVE-2023-30576		 CWE-416 Medium
No
No
 1.5.2 01.02.2024 SB2023060680
#VU86013 - Improper input validation
CVE-2023-30575		 CWE-20 Low
No
No
 1.5.2 01.02.2024 SB2023060680
#VU59553 - Improper Authorization
CVE-2021-43999		 CWE-285 Medium
No
No
 1.4.0 12.01.2022 SB2022011217
#VU59552 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41767		 CWE-200 Medium
No
No
 1.4.0 12.01.2022 SB2022011217
#VU29482 - Access of Uninitialized Pointer
CVE-2020-9498		 CWE-824 High
Available
No
 1.2.0 02.07.2020 SB2020070221
SB2020070804
SB2020122602
and 2 more
#VU29481 - Improper input validation
CVE-2020-9497		 CWE-20 Medium
Available
No
 1.2.0 02.07.2020 SB2020070221
SB2020070804
SB2020122602
and 2 more
#VU17333 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1340		 CWE-200 Low
No
No
 1.0.0 31.01.2019 SB2019012311
SB2019022839
SB2019022840
and 2 more
#VU39752 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1566		 CWE-79 Low
No
No
 0.9.10 02.02.2017 SB2017020209