HD
Product
Horizon Daas
On CISA KEVExploited in the wildRansomware-linked
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Horizon Daas to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 8.0.0 before 9.0.0.0 |
| CVE-2018-6960 | 8.8 | Apr 20 | VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication Affected: 7.0.0 before 8.0.0 |
| CVE-2020-3977 | 6.5 | Sep 22 | VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication Affected: 8.0.0 through 8.0.1; 7.0.0 |
| CVE-2017-4897 | 5.5 | May 31 | VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data Affected: through 6.1.6 |
Showing 4