Skyhigh — Vulnerabilities & Security Advisories 4

Skyhigh provides cloud security posture management, focusing on discovering and securing cloud services and data. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws. The product has faced scrutiny for misconfigurations that exposed sensitive data, with four CVEs recorded to date. Security researchers have identified authentication bypass issues and insecure default settings in its components. While Skyhigh offers visibility into cloud environments, its own implementation has occasionally introduced risks rather than mitigating them, particularly in API access controls and session management.