Qualys Web Application Vulnerable Item Integration

<webApp>

..

<id>web_app_id</id>

..

</webApp>

Source Application ID

Web app ID

<uniqueId>

Source AVIT ID

unique Id from API response

<qid>

Vulnerability

source_scan_id

Source Scan ID

<severity>

Source Severity

Severity of the vuln detection (1 to 5)

<webApp>

..

<name>web_app_name</name>

..

</webApp>

Application Release

Web app name

<firstDetectedDate>

First Found

<lastDetectedDate>

Last Found

Deferral date

ignore_date

Deferral notes

ignore_reason

<lastTestedDate>

Last Scan Date

Qualys WAS stored this time in the UTC format. The integration converts this UTC time into the time zone configured for this ServiceNow instance.

Last Opened

This field is populated based on when the record was synced from the Qualys platform to ServiceNow. This field is populated by ServiceNow and does not correspond to a field in Qualys.

Name

Scan summary name

QID title

Name

Short Description

Combination of QID and Web App name

Source

Qualys (Hardcoded)

<PayloadInstance>

<payload> + <request>

</PayloadInstance>

Source Request

<response>

Source Response

Source link

Link to the findings on the Qualys UI

<PayloadInstance>

<request>

                                 <link> </link>

</PayloadInstance>

Location

<Finding>

<name>

qid_title

</name>

</Finding>

Summary

QID title

from KB to AVIT table

Vulnerability Summary

QID title (from KB)

from KB to AVIT table

Vulnerability explanation

DIAGNOSIS from QID (KB)

from KB to AVIT table

Recommendation

SOLUTION from QID (KB)

<status>

Source Remediation Status

Status of the respective detections