Release Notes

This topic describes the new features, improvements, and issues addressed in Qualys Container Vulnerability Response Integration releases.

Release 1.2.0

July 15, 2026

OIDC Authentication Support

This release introduces OpenID Connect (OIDC) authentication to all supported modules, enhancing overall security posture while maintaining compatibility with existing data collection workflows.

You can now select between Basic Authentication and OIDC within the setup screen and securely provide Client ID and Client Secret credentials. The Qualys platform also supports granular permission selection for specific modules when generating a Client ID, ensuring improved access control and a smooth transition to OIDC.

For more details, see Configure Qualys CVR Credentials.

Enhanced Instance-Level Control for API Parameters

This release centralizes pagination and filtering settings by moving all API-related parameters to the CVR Instance Configuration page. You can now manage these settings from a single location, simplifying configuration and improving usability.

The following parameters are added to the CVR Instance Configuration page:

• Image Filter for Image Integration
• Image Filter for Container Integration
• Image API Page Size
• Container API Page Size
• KB API Page Size

All fields available on the CVR Instance Configuration page can also be configured from the Integration Instance Parameter table.

This update ensures consistent instance-level control over API data retrieval while reducing configuration complexity.

For more details, see Configure Qualys CVR Credentials.

Release 1.1.0

October 06, 2025 (Updated October 24, 2025)

Improved Integration for Image and Container Vulnerabilities

In this release, the integration between Qualys and ServiceNow CVR has been enhanced to provide deeper visibility and prioritization capabilities.

• Expanded Data Coverage: In addition to container vulnerabilities, the integration now ingests image vulnerabilities, ensuring more comprehensive risk visibility across both images and running containers.

• Merged Context: For in-use images, image and container details are automatically merged to provide a unified view of vulnerabilities.

• Flexible Configuration: You can now choose between:
  • Option 1: Pull Only In-use Images (includes merged container context)
  • Option 2: Pull All Available Images (container context not included)

Enhanced Prioritization and Automation: The integration now supports the Qualys QDS score (powered by 25+ threat feeds) and Qualys tags, enabling automated workflow assignment and risk-based prioritization directly within ServiceNow.

New API with 'imageInUse' Filter 

A new ServiceNow API has been introduced to provide greater flexibility when pulling image and container data.

• The API now supports an imageInUse filter, allowing you to retrieve data based on whether an image is actively in use.

• This enables more targeted data synchronization - for example, you can choose to pull only in-use images (merged with container context) or all available images for complete visibility.

Enhanced Data Retrieval Flexibility  (Removed 'state:RUNNING' Filter)

The default state:RUNNING filter has been removed from the Container Integration to provide greater flexibility and broader visibility.

• Previously, data retrieval relied on the lastVmScanData field, which limited results to only scanned containers. This could exclude inventory items with no recent scans.

• With this update, all containers are now included in the data pull, regardless of scan status — ensuring more complete inventory coverage.

• For Option 1 (Pull only in-use images), cluster and namespace details are automatically merged for images associated with multiple containers, providing unified visibility in the Discovered Container Image table.

Changes to Import Data Since Field Configuration

The following changes are made to the 'Import Data Since' field:

• The 'Import Data Since' field is supported for both date and time, allowing better tracking of when data is last pulled.
• For Container Vulnerability Integration, the 'Import Data Since' field is populated with the latest 'lastUpdated' date from the previous image response after the pull is complete and is restricted to a maximum of 30 days in the past.
• For Image Vulnerability Integration, the 'Import Data Since' field is populated with the latest 'lastUpdated' date from the previous image response after the pull is complete and is restricted to a maximum of 90 days in the past.
• The ‘Import Data Since’ field is prepopulated with a date from the last 7 days after initial installation.

Improvements in Various Mappings

Following are the changes in the mappings in different configurations:

• The QDS score is mapped to the Source Risk Score field in the Third-Party Vulnerability Entry table.

• Image layer data, along with its mappings and associations, is added to the Discovered Container Image table.

• Qualys-assigned tags are mapped to the 'Score Risk Factor' field to enhance tag-based classification and filtering.

• Cluster and namespace information are mapped in the Discovered Container Image table only when Option 1 (pull only in-use images) is selected.

• The 'isBaseImage' flag is mapped in both the Discovered Container Image table and the CVIT table.
• All CVEs for the QID are listed as comma-separated values in the third-party vulnerability table.

Release 1.0.1

January 06, 2025

In this release,

• We have added a few improvements with minor bug fixes.

Release 1.0.0

October 04, 2024

The Qualys CVR Integration offers you the following features:

• View all the container details along with their vulnerability details in ServiceNow.

• View additional information, such as registry, repository, and tag, for an image of the container.

• View the data synced from Qualys Container security in a single glass pane view in the well-curated dashboard.

You only need to configure the Qualys Container Vulnerability Integration manually. Once the Container Vulnerability integration run is completed, the next integration, Qualys Image Vulnerability Integration, starts automatically. After the Image Integration is successfully completed, the Knowledgebase Integration will be auto-triggered.