Login Request a demo
GU
Product
Guacamole
by Apache · last CVE Jul 2, 2025
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 8Medium 5Low 0
Severity
All severities13Critical0High8Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Guacamole to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-9498
6.7
1%
Jul 2
Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels
Affected: through 1.1.0
CVE-2021-41767
6.5
2%
Jan 11
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses
Affected: through 1.3.0
CVE-2016-1566
5.4
2%
Feb 2
Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote…
Affected: 0.9.8; 0.9.9
CVE-2020-9497
4.4
1%
Jul 2
Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels
Affected: through 1.1.0
CVE-2020-11997
4.3
1%
Jan 19
Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility
Affected: through 1.2.0
Showing 5