Skip to main content
0-Doubt
VendorsQuestionnairesInvestorsNews
0-Doubt — neutral IT/Security research
BrowseProductsMarket reportsResellersCertified analystsInvestorsRFI/RFP questionnairesHow trust worksNothing here is ranked by paymentHelp & FAQAPIPrivacyTermsCookies
  1. Home/
  2. Vendors/
  3. Qualys/
  4. Qualys TotalCloud
  1. Home/
  2. Vendors/
  3. Cloud-Native Application Protection (CNAPP)/
  4. Qualys TotalCloud

Qualys TotalCloud

CNAPPAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 19 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~115 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Cloud-native application protection (CNAPP).

by Qualys · qualys.com · source ↗

Known CVEs (19)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.

RSS ⇢
  • CVE-2026-70440 ↗MEDIUM 5.42026

    Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerabil…

  • CVE-2025-43079 ↗MEDIUM 6.32025

    The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and wi…

  • CVE-2024-48992 ↗HIGH 7.82024

    Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled R…

  • …and 16 more · see all on the vendor page →

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Cloud-Native Application Protection (CNAPP) products

see all →
  • Plexicus Cloud Security Posture Management · Plexicus
  • Prisma Cloud · Palo Alto Networks
  • Prowler Lighthouse AI · Prowler
  • QinetiQ · QinetiQ
  • RAD Security Platform · RAD Security
  • Rapid7 InsightCloudSec · Rapid7
  • RoonCyber Runtime CNAPP + CADR · RoonCyber
  • Runtime CNAPP · Sweet Security