Qualys
5 CVEs across 8 Qualys products. Browse Qualys vulnerabilities, severities, and proof-of-concept exploits.
Qualys products with known CVEs
Qualys CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-6149 | Medium | 5.7 | 2024-01-09 |
Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check whi… |
CVE-2023-6148 | Medium | 5.7 | 2024-01-09 | Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permissi… |
CVE-2023-6147 | Medium | 5.7 | 2024-01-09 | Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permissi… |
CVE-2023-6146 | Medium | 5.7 | 2023-12-08 |
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information t… |
CVE-2023-4777 | Low | 3.1 | 2023-09-08 |
An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while… |
CVE-2023-28143 | Medium | 6.7 | 2023-04-18 |
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7)
installer allows a local escalation of privilege bounded only to the time of
installation and only… |
CVE-2023-28142 | Medium | 6.7 | 2023-04-18 |
A Race Condition exists in the Qualys Cloud Agent for Windows
platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to
escalate privile… |
CVE-2023-28141 | Medium | 6.7 | 2023-04-18 |
An NTFS Junction condition exists in the Qualys Cloud Agent
for Windows platform in versions before 4.8.0.31. Attackers may write files to
arbitrary locations… |
CVE-2023-28140 | Medium | 6.7 | 2023-04-18 |
An Executable Hijacking condition exists in the
Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers
may load a malicious copy of a D… |
CVE-2022-29550 | Medium | 5.5 | 2022-08-18 | An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for exa… |
CVE-2022-29549 | High | 7.3 | 2022-08-18 | An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks (e… |