CVE Program partner

Qualys

Qualys, Inc.

API
CVEs, 365 days110 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationQualys, Inc.
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeAll Qualys products and vulnerabilities discovered by Qualys that are not covered by another CNA’s scope.
Advisorieshttps://www.qualys.com/security-advisories/

Latest CVEs · RSS

  • CVE-2025-43079 2025-11-10 · CVSS 6.3
    The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system comm
  • CVE-2023-6149 2024-01-09 · CVSS 5.7
    Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check whil
  • CVE-2023-6148 2024-01-09 · CVSS 5.7
    Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permissio
  • CVE-2023-6147 2024-01-09 · CVSS 5.7
    Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permissio
  • CVE-2023-6146 2023-12-08 · CVSS 5.7
    A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to
  • CVE-2023-4777 2023-09-08 · CVSS 3.1
    An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while l
  • CVE-2023-28143 2023-04-18 · CVSS 6.7
    Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only
  • CVE-2023-28142 2023-04-18 · CVSS 6.7
    A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileg
  • CVE-2023-28141 2023-04-18 · CVSS 6.7
    An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations
  • CVE-2023-28140 2023-04-18 · CVSS 6.7
    An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a De

All CVE Program partners