AnsweredAssumed Answered

WAS knowledgebase vs VM knowledgebase

Question asked by Manish Rana on Oct 6, 2016
Latest reply on Oct 10, 2016 by djprakash



I am just curious why does Qualys manage 2 separate knowledge bases for VM and WAS?

For example the vulnerability CVE-2014-7236 is a TWiki related remote code execution vulnerability but it is not there in the WAS database. It can be exploited by a specially crafted http request. So, it should be listed in WAS but it is not.


Please help me understand why Qualys behaves in such a way.