Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2023-6146

Stored XSS Vulnerability in QualysGuard VM/PC

Description

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualys Qualysguard

Default version status: unaffected

  • to < 10.24.0.0affected

References