GCVE - cpe:2.3:a:vmware:horizon_daas:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:horizon_daas:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Vmware (`7bb62c7c-2241-5a0b-8dbc-5f13251fb24e`)
Product	Horizon Daas (`8f0833de-ccd5-55ac-a788-2cd48087d7df`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-3977`	vulnerable	2026-06-08 05:25:58.511579	Details available VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS. Published: 2020-09-22T13:45:14.000Z Updated: 2024-08-04T07:52:20.663Z Open on db.gcve.eu Reference links https://www.vmware.com/security/advisories/VMSA-2020-0021.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5544`	vulnerable	2026-06-08 05:14:07.609789	Details available OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. Published: 2019-12-06T15:54:18.000Z Updated: 2025-10-21T23:35:56.590Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2019-0022.html http://www.openwall.com/lists/oss-security/2019/12/10/2 http://www.openwall.com/lists/oss-security/2019/12/11/2 https://access.redhat.com/errata/RHSA-2019:4240 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6960`	vulnerable	2026-06-08 05:11:54.529257	Details available VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS. Published: 2018-04-20T13:00:00.000Z Updated: 2024-09-16T23:16:44.294Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103938 https://www.vmware.com/security/advisories/VMSA-2018-0010.html http://www.securitytracker.com/id/1040731	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-4897`	vulnerable	2026-06-08 05:09:38.291379	Details available VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link. Published: 2017-05-31T14:00:00.000Z Updated: 2024-08-05T14:39:41.400Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1037951 http://www.securityfocus.com/bid/96559 http://www.vmware.com/security/advisories/VMSA-2017-0002.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.