Qualys kayıtları
qualys üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %27,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-611 Improper Restriction of XML External Entity Reference2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-426 Untrusted Search Path1
- CWE-427 Uncontrolled Search Path Element1
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2022-29549İstismar yok | An issue was discovered in Qualys Cloud Agent 4.8.0-49.qualys · cloud agent for linux · CWE-354 | Yüksek7,3 | — | %0,3 | 18 Ağu 2022 |
28İzleyin | CVE-2023-28140İstismar yok | Executable Hijackingqualys · cloud agent · CWE-427 | Yüksek7,0 | — | %0,2 | 18 Nis 2023 |
28İzleyin | CVE-2023-28143İstismar yok | Local Privilege Escalationqualys · cloud agent · CWE-426 | Yüksek7,0 | — | %0,2 | 18 Nis 2023 |
28İzleyin | CVE-2023-28142İstismar yok | A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1.qualys · cloud agent · CWE-362 | Yüksek7,0 | — | %0,1 | 18 Nis 2023 |
26İzleyin | CVE-2023-6147İstismar yok | Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliancequalys · policy compliance · CWE-611 | Orta6,5 | — | %0,5 | 9 Oca 2024 |
26İzleyin | CVE-2023-6149İstismar yok | Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Securityqualys · web application screening · CWE-611 | Orta6,5 | — | %0,5 | 9 Oca 2024 |
25İzleyin | CVE-2023-28141İstismar yok | An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31.qualys · cloud agent · CWE-59 | Orta6,3 | — | %0,2 | 18 Nis 2023 |
22İzleyin | CVE-2022-29550İstismar yok | An issue was discovered in Qualys Cloud Agent 4.8.0-49.qualys · cloud agent · CWE-532 | Orta5,5 | — | %0,4 | 18 Ağu 2022 |
21İzleyin | CVE-2023-6148İstismar yok | Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliancequalys · policy compliance · CWE-79 | Orta5,4 | — | %0,5 | 9 Oca 2024 |
21İzleyin | CVE-2023-6146İstismar yok | Stored XSS Vulnerability in QualysGuard VM/PCqualys · private cloud platform · CWE-79 | Orta5,4 | — | %0,4 | 8 Ara 2023 |
17İzleyin | CVE-2023-4777İstismar yok | Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlierqualys · container scanning connector · CWE-732 | Orta4,3 | — | %0,4 | 8 Eyl 2023 |
- CVE-2022-2954929İzleyin
An issue was discovered in Qualys Cloud Agent 4.8.0-49.
YüksekCVSS 7,3İstismar yokEPSS %0qualys · cloud agent for linux18 Ağu 2022
- CVE-2023-2814028İzleyin
Executable Hijacking
YüksekCVSS 7,0İstismar yokEPSS %0qualys · cloud agent18 Nis 2023
- CVE-2023-2814328İzleyin
Local Privilege Escalation
YüksekCVSS 7,0İstismar yokEPSS %0qualys · cloud agent18 Nis 2023
- CVE-2023-2814228İzleyin
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1.
YüksekCVSS 7,0İstismar yokEPSS %0qualys · cloud agent18 Nis 2023
- CVE-2023-614726İzleyin
Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
OrtaCVSS 6,5İstismar yokEPSS %1qualys · policy compliance9 Oca 2024
- CVE-2023-614926İzleyin
Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security
OrtaCVSS 6,5İstismar yokEPSS %0qualys · web application screening9 Oca 2024
- CVE-2023-2814125İzleyin
An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31.
OrtaCVSS 6,3İstismar yokEPSS %0qualys · cloud agent18 Nis 2023
- CVE-2022-2955022İzleyin
An issue was discovered in Qualys Cloud Agent 4.8.0-49.
OrtaCVSS 5,5İstismar yokEPSS %0qualys · cloud agent18 Ağu 2022
- CVE-2023-614821İzleyin
Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance
OrtaCVSS 5,4İstismar yokEPSS %0qualys · policy compliance9 Oca 2024
- CVE-2023-614621İzleyin
Stored XSS Vulnerability in QualysGuard VM/PC
OrtaCVSS 5,4İstismar yokEPSS %0qualys · private cloud platform8 Ara 2023
- CVE-2023-477717İzleyin
Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier
OrtaCVSS 4,3İstismar yokEPSS %0qualys · container scanning connector8 Eyl 2023