CVE-2019-5513: VMware Horizon

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.

Affected products

• VMware Horizon: from 6.0.0, before 6.2.8 (fixed in 6.2.8); from 7.0, before 7.8 (fixed in 7.8); from 7.5.0, before 7.5.2 (fixed in 7.5.2)

Published 2019-04-09. Last modified 2026-06-17.