Patch List


The Patch API lets you view the list of all superseding patches for detection on specific host. For the host, the Patch Info List provides information such as detection QID, patch QID, patch severity, patch title, patch vendor ID, patch release date, and patch links.

User permissions - Managers and Unit Managers can fetch the patch list on assets in their own business unit. Scanners and Readers fetch the patch list on assets in their own account.

Input ParametersInput Parameters



Data Type



Required Integer 

The output lists all the superseding patches that will fix the detections on a single host instance. Specify the ID for the host to include in the report. A valid host ID must be entered.


Optional File 

Specifies the format of the host detection list output. When not specified, the output format is xml. A valid value is xml.

Sample - Purge Assessment Data for HostSample - Purge Assessment Data for Host

API Request

curl -u "USERNAME:PASSWORD" -X "GET" -H "Content-Type: text/xml""host_id=136801&output_format=xml""https://<qualys_base_url>/api/2.0/fo/asset/patch/index.php"

XML Output

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE PATCH_LIST_OUTPUT SYSTEM "https://<qualys_base_url>/api/2.0/fo/asset/patch/host_patches.dtd">
    <OS><![CDATA[Windows 2003 Service Pack 2]]></OS>
    <NETWORK><![CDATA[Star Trek]]></NETWORK>
          <QID cve_ids=""><![CDATA[19883]]></QID>
        <PATCH_QID cve_ids=""><![CDATA[19883]]></PATCH_QID>
        <PATCH_TITLE><![CDATA[Oracle on Microsoft Windows - General Update Multiple Issues (Patch #54)]]></PATCH_TITLE>
        <PATCH_VENDOR_ID><![CDATA[ Patch 54 - 32bit, Patch 54 - 64bit]]></PATCH_VENDOR_ID>
        <PATCH_RELEASE_DATE>2013-10-15 00:00:00</PATCH_RELEASE_DATE>
          <LINK os_sw="Windows"><![CDATA[]]></LINK>
          <LINK os_sw="Windows"><![CDATA[]]></LINK>


<platform API server>/api/2.0/fo/asset/patch/host_patches.dtd