Qualys vulnerabilities
We track 4 vulnerabilities in Qualys products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 18, 2023.
Latest Qualys vulnerabilities
- 7.0 High severity
Cloud Agent: Untrusted Search Path
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file permissions to
- 7.0 High severity
Cloud Agent: Concurrent Execution using Shared Resource with Improper Synchronization
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attacker
- 7.0 High severity
Cloud Agent: Uncontrolled Search Path Element
An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library (DLL) via a local attack vector instead of the DLL that the application was exp
- 7.3 High severity
Cloud Agent For Linux: Improper Validation of Integrity Check Value
An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks (e.g., to help ensure that a program was installed by root) and without integrity checks (e.g., a checks