https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-6149.htmlhttps://patchthecve.com/cve/CVE-2023-6149.htmlWed, 17 Jun 2026 06:50:09 +0000MEDIUM 5.7: Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs to utilize thehttps://patchthecve.com/cve/CVE-2023-6148.htmlhttps://patchthecve.com/cve/CVE-2023-6148.htmlWed, 17 Jun 2026 06:50:09 +0000MEDIUM 5.7: Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure or ehttps://patchthecve.com/cve/CVE-2023-6147.htmlhttps://patchthecve.com/cve/CVE-2023-6147.htmlWed, 17 Jun 2026 06:50:08 +0000MEDIUM 5.7: Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs tohttps://patchthecve.com/cve/CVE-2023-6146.htmlhttps://patchthecve.com/cve/CVE-2023-6146.htmlWed, 17 Jun 2026 06:50:08 +0000MEDIUM 5.7: A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details.  https://patchthecve.com/cve/CVE-2023-4777.htmlhttps://patchthecve.com/cve/CVE-2023-4777.htmlWed, 17 Jun 2026 06:38:34 +0000LOW 3.1: An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an a