[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f50qXRwXu9qZBef5i4DXHLS0eEPj1mspGX8BJhw--dTg":3,"g5a-family:vmware\u002Fhorizon_daas":86,"g5a-ex:vmware\u002Fhorizon_daas@*":87},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":58,"seoMetadata":64,"meta":83},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":23},"vmware","horizon_daas",4,1,"2020-09-22",[13,17,19,21],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"6.1.6",0,false,{"version":18,"cve_count":10,"kev_count":15,"has_kev":16},"7.0.0",{"version":20,"cve_count":15,"kev_count":15,"has_kev":16},"8.0.0",{"version":22,"cve_count":15,"kev_count":15,"has_kev":16},"8.0.1","Horizon Daas by Vmware is a technology product with 4 tracked versions and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27,28],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},{"version":18,"cve_count":10,"kev_count":15,"has_kev":16},{"version":20,"cve_count":15,"kev_count":15,"has_kev":16},{"version":22,"cve_count":15,"kev_count":15,"has_kev":16},[30,38,46,53],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.","2019-12-06",9.8,"v3.1","Critical",0.97258,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":16,"epssScore":45},"CVE-2018-6960","VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.","2018-04-20",8.8,"v3.0","High",0.02472,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":43,"severity":51,"isKev":16,"epssScore":52},"CVE-2017-4897","VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a malicious server and sharing all their drives and devices. Successful exploitation of this vulnerability requires a victim to download a specially crafted RDP file through DaaS client by clicking on a malicious link.","2017-05-31",5.5,"Medium",0.01148,{"cveId":54,"description":55,"publishedDate":11,"cvssScore":56,"cvssVersion":35,"severity":51,"isKev":16,"epssScore":57},"CVE-2020-3977","VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.",6.5,0.0096,[59],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"severity":36,"isKev":4,"epssScore":37,"cisaVulnName":60,"cisaDateAdded":61,"cisaShortDescription":62,"cisaRequiredAction":63},"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","2021-11-03","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.","Apply updates per vendor instructions.",{"title":65,"metaDescription":66,"keywords":67,"structuredData":68},"Horizon Daas by Vmware - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Horizon Daas by Vmware covering 4 versions with 4 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Horizon Daas vulnerabilities, Horizon Daas security, Horizon Daas CVE, Vmware Horizon Daas, Horizon Daas threat intelligence, Vmware security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Horizon Daas KEV, Horizon Daas exploited vulnerabilities",{"@context":69,"@type":70,"name":71,"description":66,"url":72,"manufacturer":73,"applicationCategory":77,"softwareVersion":78,"mainEntity":79},"https:\u002F\u002Fschema.org","SoftwareApplication","Horizon Daas","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fvmware\u002Fhorizon_daas",{"@type":74,"name":75,"url":76},"Organization","Vmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvmware","Security Software","4 versions tracked",{"@type":80,"name":81,"description":82,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Horizon Daas Security Vulnerabilities","Security vulnerabilities affecting Horizon Daas by Vmware",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":84,"apiVersion":85},"2026-10-17T15:20:17.132Z","3.0",[],{"rows":88,"total":10,"capped":16,"failed":15},[89],{"cveId":31,"name":60,"severity":36,"cvss":34,"added":61,"epss":37,"published":90,"ranges":91,"checked":4,"hits":93,"covers":16},"2019-12-06T16:15:11.467",[92],"8.0.0 to before 9.0.0.0",[]]