Qualys scan versus Yum update mismatch

A recent Qualys scan found several updates need to be applied however DNF/YUM update marked no packages for update.

Example:
Qualys shows
Package Installed Version Required Version
firefox 102.10.0-1.el7_9.x86_64 102.12.0-1.el7_9#

The server is running version:
Mozilla Firefox 102.10.0esr

Yum update states:
No packages marked for update

Why is there a discrepancy between the Qualys scan and what is available for update?

Thank you