Horizon Daas

horizon_daas

Vendor: Vmware • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-3977 1Vmware 1Horizon Daas Jun 17, 2026 Sep 22, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow...Show more VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.Show less
CVE-2019-5544 4Fedoraproject OpenslpRedhat+1 more 16Enterprise Linux Desktop Enterprise Linux For Ibm Z SystemsEnterprise Linux For Ibm Z Systems Eus+13 more Jun 17, 2026 Dec 6, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
CVE-2018-6960 1Vmware 1Horizon Daas Jun 17, 2026 Apr 20, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitima...Show more VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.Show less
CVE-2017-4897 1Vmware 1Horizon Daas May 13, 2026 May 31, 2017 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sha...Show more VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link.Show less