Patch Management Release 3.7 API

June 10, 2025

Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. For this API Release Notes, <qualys_base_url> is mentioned in the sample API requests.

New API: Get List of Whitelisted Domains for Windows and Mac

New or Updated API New
API Endpoint  /pm/v1/patchcatalog/patches/domains
Method POST
DTD or XSD changes Not Applicable

We have introduced a new Get List of Whitelisted Domains API that provides the list of unique domains for Windows and Mac platforms that you need to whitelist to download the patches from a trusted source securely. 

Input ParametersInput Parameters

Parameter

Mandatory/
Optional

Data Type

Description

 platform Mandatory String Specify the platform type. 
For example, platform: Windows

Sample - Get List of Domains for Windows (without filter)Sample - Get List of Domains for Windows (without filter)

API Request

curl -X 'POST' 
'<qualys_base_url>/pm/v1/patchcatalog/patches/domains?platform=Windows' 
 -H 'accept: application/json' 
 -H 'Authorization: Bearer <JWT_Token>' 
 -H 'Content-Type: application/json'
 -d ''

API Response

[
  "https://osdn.mirror.constant.com",
  "http://updates-http.cdn-apple.com",
  "http://www.tightvnc.com",
  "https://forums.ivanti.com",
  "http://sourceforge.net",
  "http://download.techsmith.com",
  "https://aimp.ru",
  "http://www.wireshark.org"
]

Sample - Get List of Domains for Windows (with filter)Sample - Get List of Domains for Windows (with filter)

API Request

curl -X 'POST' \
'<qualys_base_url>/pm/v1/patchcatalog/patches/domains?platform=Windows' 
-H 'accept: application/json' 
-H 'Authorization: Bearer <JWT_Token>'
-H 'Content-Type: application/json' 
-d '{
  "filter": "vendor:`Microsoft` and appFamily:`Windows`"
}'

API Response

[
  "http://b1.download.windowsupdate.com",
  "http://javadl.sun.com",
  "https://catalog.sf.dl.delivery.mp.microsoft.com",
  "http://releases.mozilla.org",
  "https://content.ivanti.com",
  "http://ftp.adobe.com",
  "https://download.microsoft.com",
  "https://ardownload3.adobe.com",
  "https://ardownload2.adobe.com",
  "https://catalog.s.download.windowsupdate.com",
  "http://www.download.windowsupdate.com",
  "http://download.windowsupdate.com",
  "http://download.microsoft.com"
]

Sample - Get List of Domains for Mac (without filter)Sample - Get List of Domains for Mac (without filter)

API Request

curl -X 'POST' 
'<qualys_base_url>/pm/v1/patchcatalog/patches/domains?platform=Mac' \
-H 'accept: application/json' 
-H 'Authorization: Bearer <JWT_Token>' 
-H 'Content-Type: application/json' 
-d ''

API Response

[
  "https://dl.google.com",
  "https://d11yldzmag5yn.cloudfront.net",
  "https://downloads.slack-edge.com",
  "https://freemacsoft.net",
  "https://officecdnmac.microsoft.com",
  "https://abqix.mm.fcix.net"
]

Sample - Get List of Domains for Mac (with filter)Sample - Get List of Domains for Mac (with filter)

API Request

curl -X 'POST' \
'<qualys_base_url>/pm/v1/patchcatalog/patches/domains?platform=Mac' 
-H 'accept: application/json' 
-H 'Authorization: Bearer <JWT_Token>' 
-H 'Content-Type: application/json' 
-d '{
  "filter": "vendorSeverity:`Critical` and supportedOs:`macOS 14 Sonoma`"
}'

API Response

[
  "https://dl.google.com",
  "https://docs.vmware.com",
  "https://archive.seamonkey-project.org",
  "https://emacsformacosx.com",
  "https://swcdn.apple.com",
  "https://officecdn.microsoft.com",
  "https://download-installer.cdn.mozilla.net",
  "https://msedge.sf.dl.delivery.mp.microsoft.com",
  "https://content.ivanti.com",
  "https://ardownload3.adobe.com",
  "https://download-cdn.jetbrains.com",
  "https://ardownload2.adobe.com",
  "https://officecdn-microsoft-com.akamaized.net",
  "https://referrals.brave.com"
]

Issues Addressed

The following reported and notable customer issues are fixed in this release.

Component/Category Description

PM - Reports API

We fixed the issue where the API rate limit was 10 requests per hour per customer.

Now the limit is increased to 30 requests per hour per customer. 

UI Release Updates

To know in detail about the UI features, enhancements and issues addressed, see Patch Management Release 3.7