Qualys WAS
Summary: The Qualys WAS extension connects Burp Suite with the Qualys Web Application Scanning module on the Qualys Cloud Platform, letting users import a WAS finding into Repeater for manual validation and send Burp Scanner issues to Qualys WAS for combined reporting. Version 2.0.3, authored by Dave Ferguson of Qualys and last updated 22 June 2026, requires a Qualys WAS subscription with API access and carries an overall system impact rating of Low.
Bottom line: The extension is third-party code that PortSwigger explicitly makes no warranty about, so the quality and usefulness of what it pulls into your scanning workflow rests with the author rather than the platform vendor.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026