Qualys records

11 published records for vendor qualys.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 27.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2022-29549No exploit	An issue was discovered in Qualys Cloud Agent 4.8.0-49.qualys · cloud agent for linux · CWE-354 Local privilege escalation	High7.3	—	0.3%	Aug 18, 2022
28Monitor	CVE-2023-28140No exploit	Executable Hijackingqualys · cloud agent · CWE-427 Local privilege escalation	High7.0	—	0.2%	Apr 18, 2023
28Monitor	CVE-2023-28143No exploit	Local Privilege Escalationqualys · cloud agent · CWE-426 Local privilege escalation	High7.0	—	0.2%	Apr 18, 2023
28Monitor	CVE-2023-28142No exploit	A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1.qualys · cloud agent · CWE-362 Local privilege escalation Race condition	High7.0	—	0.1%	Apr 18, 2023
26Monitor	CVE-2023-6147No exploit	Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliancequalys · policy compliance · CWE-611 XXE	Medium6.5	—	0.5%	Jan 9, 2024
26Monitor	CVE-2023-6149No exploit	Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Securityqualys · web application screening · CWE-611 XXE	Medium6.5	—	0.5%	Jan 9, 2024
25Monitor	CVE-2023-28141No exploit	An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31.qualys · cloud agent · CWE-59 Local privilege escalation	Medium6.3	—	0.2%	Apr 18, 2023
22Monitor	CVE-2022-29550No exploit	An issue was discovered in Qualys Cloud Agent 4.8.0-49.qualys · cloud agent · CWE-532 Info leak	Medium5.5	—	0.4%	Aug 18, 2022
21Monitor	CVE-2023-6148No exploit	Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliancequalys · policy compliance · CWE-79 XSS	Medium5.4	—	0.5%	Jan 9, 2024
21Monitor	CVE-2023-6146No exploit	Stored XSS Vulnerability in QualysGuard VM/PCqualys · private cloud platform · CWE-79 XSS	Medium5.4	—	0.4%	Dec 8, 2023
17Monitor	CVE-2023-4777No exploit	Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlierqualys · container scanning connector · CWE-732	Medium4.3	—	0.4%	Sep 8, 2023

CVE-2022-29549
29Monitor
An issue was discovered in Qualys Cloud Agent 4.8.0-49.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
qualys · cloud agent for linuxAug 18, 2022
CVE-2023-28140
28Monitor
Executable Hijacking
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
qualys · cloud agentApr 18, 2023
CVE-2023-28143
28Monitor
Local Privilege Escalation
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
qualys · cloud agentApr 18, 2023
CVE-2023-28142
28Monitor
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
qualys · cloud agentApr 18, 2023
CVE-2023-6147
26Monitor
Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
MediumCVSS 6.5No exploitEPSS 1%
- XXE
qualys · policy complianceJan 9, 2024
CVE-2023-6149
26Monitor
Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security
MediumCVSS 6.5No exploitEPSS 0%
- XXE
qualys · web application screeningJan 9, 2024
CVE-2023-28141
25Monitor
An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31.
MediumCVSS 6.3No exploitEPSS 0%
- Local privilege escalation
qualys · cloud agentApr 18, 2023
CVE-2022-29550
22Monitor
An issue was discovered in Qualys Cloud Agent 4.8.0-49.
MediumCVSS 5.5No exploitEPSS 0%
- Info leak
qualys · cloud agentAug 18, 2022
CVE-2023-6148
21Monitor
Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance
MediumCVSS 5.4No exploitEPSS 0%
- XSS
qualys · policy complianceJan 9, 2024
CVE-2023-6146
21Monitor
Stored XSS Vulnerability in QualysGuard VM/PC
MediumCVSS 5.4No exploitEPSS 0%
- XSS
qualys · private cloud platformDec 8, 2023
CVE-2023-4777
17Monitor
Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier
MediumCVSS 4.3No exploitEPSS 0%
qualys · container scanning connectorSep 8, 2023