VMware Horizon DaaS vulnerabilities

4 CVEs affecting VMware Horizon DaaS, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3977, published 2020-09-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5544: VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability, published 2019-12-06. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 97.3% chance of exploitation in the next 30 days. OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base…
CVE-2018-6960, published 2018-04-20. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker…
CVE-2017-4897, published 2017-05-31. Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days. VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a…
CVE-2020-3977, published 2020-09-22. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of…