Stored XSS Vulnerability in QualysGuard VM/PC
Vulnerability Description
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6146
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Frank Cozijnsen of the KPN REDteam
References
Affected Vendor
Qualys
View all reports →