CVE-2018-6960

8.8 highEPSS 2.5%

High (8.8) in vmware horizon daas. EPSS 2.5% chance of exploitation in the next 30 days.

VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2018-04-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vmware:horizon_daas

References

http://www.securityfocus.com/bid/103938
http://www.securitytracker.com/id/1040731
https://www.vmware.com/security/advisories/VMSA-2018-0010.html
http://www.securityfocus.com/bid/103938
http://www.securitytracker.com/id/1040731

Check your stack JSON