Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Qualys Component: Policy Compliance Clear all filters
TI-2023-05653 CVE-2023-6148 · GHSA-rwf9-8fqr-p44m

Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance

Priority LOW 26

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Clou…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00458 Published 2024-01-09 Fixed in 1.0.6 CWE-79
TI-2023-05652 CVE-2023-6147 · GHSA-8525-52vg-jv6v

Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance

Priority LOW 30

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Clou…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00547 Published 2024-01-09 Fixed in 1.0.6 CWE-611