Vmware Horizon Daas — known CVE vulnerabilities

Every CVE whose affected-product data names Vmware Horizon Daas, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-5544 — CVSS 9.8 (critical) — actively exploited: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be…
• CVE-2018-6960 — CVSS 8.8 (high): VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor…
• CVE-2020-3977 — CVSS 6.5 (medium): VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled…
• CVE-2017-4897 — CVSS 5.5 (medium): VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this…