How many Apache Software Foundation guacamole CVEs are in CISA KEV?

None of Apache Software Foundation guacamole's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Apache Software Foundation guacamole are affected?

17 distinct Apache Software Foundation guacamole versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation guacamole CVEs?

Apache Software Foundation guacamole's CVEs most often map to these CWE weakness types: CWE-129 (Improper Validation of Array Index), CWE-131 (Incorrect Calculation of Buffer Size), CWE-190 (Integer Overflow or Wraparound), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

What is the average severity of Apache Software Foundation guacamole CVEs?

The average CVSS base score across Apache Software Foundation guacamole's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Apache Software Foundation

13 CVEs

Apache Software Foundation guacamole Vulnerabilities

Name: Apache Software Foundation guacamole vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for guacamole by Apache Software Foundation.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.0

Avg CVSS

2017–2025

Last updated July 2, 2025

Overview

Apache Software Foundation guacamole has 13 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation guacamole, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Apache Software Foundation guacamole's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High8

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Apache Software Foundation guacamole's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Apache Software Foundation guacamole CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Apache Software Foundation guacamole version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.1.02 CVEs
1.3.0 <= v <= 1.3.02 CVEs
< 1.5.21 CVE
<= 0.9.141 CVE
<= 0.9.91 CVE
<= 1.2.01 CVE
<= 1.3.01 CVE
<= 1.5.31 CVE
0.8.0 <= v < 1.6.01 CVE
0.9.0 <= v < 1.5.21 CVE
0.9.10 <= v <= 1.5.11 CVE
0.9.8 <= v <= 0.9.81 CVE
0.9.9 <= v <= 0.9.91 CVE
1.2.0 <= v <= 1.2.01 CVE

Fixed in

1.5.22 CVEs
> 1.5.11 CVE
1.6.01 CVE

Find a version

13 CVEs

Sort

Apache Guacamole: Improper input validation of console codes
CVE-2024-35164
Patch
CWE-129
High · CVSS 7.5
EPSS 0.4% (36th pct)2025-07-02
Apache Guacamole: Integer overflow in handling of VNC image buffers
CVE-2023-43826
Patch
CWE-190
High · CVSS 8.8
EPSS 0.9% (56th pct)2023-12-19
Apache Guacamole: Use-after-free in handling of RDP audio input buffer
CVE-2023-30576
Patch
CWE-416
High · CVSS 8.1
EPSS 1.1% (63th pct)2023-06-07
Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths
CVE-2023-30575
Patch
CWE-131
High · CVSS 7.5
EPSS 1.0% (59th pct)2023-06-07
High vulnerability · 2022-01-11
CVE-2021-43999CWE-287
High · CVSS 8.8
EPSS 1.8% (76th pct)2022-01-11
Medium vulnerability · 2022-01-11
CVE-2021-41767
Patch
CWE-200
Medium · CVSS 6.5
EPSS 1.9% (78th pct)2022-01-11
Medium vulnerability · 2021-01-19
CVE-2020-11997
Patch
Medium · CVSS 4.3
EPSS 1.2% (66th pct)2021-01-19
Medium vulnerability · 2020-07-02
CVE-2020-9498
Patch
Medium · CVSS 6.7
EPSS 0.7% (51th pct)2020-07-02
Medium vulnerability · 2020-07-02
CVE-2020-9497
Patch
Medium · CVSS 4.4
EPSS 0.8% (53th pct)2020-07-02
High vulnerability · 2019-12-09
CVE-2019-19603
Patch
High · CVSS 7.5
EPSS 8.3% (94th pct)2019-12-09
High vulnerability · 2019-02-07
CVE-2018-1340
Patch
High · CVSS 7.5
EPSS 2.1% (80th pct)2019-02-07
High vulnerability · 2018-01-18
CVE-2017-3158
Patch
High · CVSS 8.1
EPSS 1.2% (66th pct)2018-01-18
Medium vulnerability · 2017-02-02
CVE-2016-1566
Medium · CVSS 5.4
EPSS 2.2% (81th pct)2017-02-02

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation guacamole CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation guacamole CVEs were published each year.

2017

1

2018

1

2019

2

2020

2

2021

1

2022

2

2023

3

2025

1

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server351 CVEs tomcat265 CVEs airflow183 CVEs Apache Airflow136 CVEs apache-airflow127 CVEs Apache HTTP Server125 CVEs httpd125 CVEs org.apache.tomcat:tomcat118 CVEs

All Apache Software Foundation vulnerabilities

Frequently asked questions

Common questions about Apache Software Foundation guacamole vulnerabilities.

How many CVEs does Apache Software Foundation guacamole have?: Apache Software Foundation guacamole has 13 published CVE records since 2017.
How many Apache Software Foundation guacamole CVEs are in CISA KEV?: None of Apache Software Foundation guacamole's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Apache Software Foundation guacamole vulnerabilities?: No Apache Software Foundation guacamole CVEs currently have a tracked public exploit in this dataset.
Which versions of Apache Software Foundation guacamole are affected?: 17 distinct Apache Software Foundation guacamole versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation guacamole CVEs?: Apache Software Foundation guacamole's CVEs most often map to these CWE weakness types: CWE-129 (Improper Validation of Array Index), CWE-131 (Incorrect Calculation of Buffer Size), CWE-190 (Integer Overflow or Wraparound), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
What is the average severity of Apache Software Foundation guacamole CVEs?: The average CVSS base score across Apache Software Foundation guacamole's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation guacamole vulnerabilities

Monitor new Apache Software Foundation guacamole vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing