bugreport@qualys.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS bugreport@qualys.com
03
assessed vulnerabilities (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-43079US | — | — | ||
The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using a… | ||||
| CVE-2023-6149US | medium6.5 | — | ||
Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a conne… | ||||
| CVE-2023-6148US | medium5.4 | — | ||
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while perfor… | ||||
| CVE-2023-6147US | medium6.5 | — | ||
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while perfor… | ||||
| CVE-2023-6146US | medium5.4 | — | ||
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnera… | ||||
| CVE-2023-4777US | medium4.3 | — | ||
An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configur… | ||||
| CVE-2023-28143US | high7.0 | — | ||
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7)
installer allows a local escalation of privilege bounded only to the time of
installation and only on older macOSX (mac… | ||||
| CVE-2023-28142US | high7.0 | — | ||
A Race Condition exists in the Qualys Cloud Agent for Windows
platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to
escalate privileges limited on the lo… | ||||
| CVE-2023-28141US | medium6.3 | — | ||
An NTFS Junction condition exists in the Qualys Cloud Agent
for Windows platform in versions before 4.8.0.31. Attackers may write files to
arbitrary locations via a local attack v… | ||||
| CVE-2023-28140US | high7.0 | — | ||
An Executable Hijacking condition exists in the
Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers
may load a malicious copy of a Dependency Link Librar… | ||||