Enterprise TruRisk™ Platform Release 10.41 API
OCTOBER 6, 2026
This release extends the scan report template APIs to include Vulnerability Tag filtering and Qualys Patchable and Mitigable details. It also adds authenticated Vulnerability Management scanning for Oracle Linux Virtualization Manager (OLVM) through new authentication record and option profile API support. The Remediation Ticket List API can now exclude ticket history to reduce response size.
Qualys Vulnerability Management (VM)
NEW FEATURE
Filter Scan Reports Using Vulnerability Tags
What's New for You
You can now configure scan report templates with Vulnerability Tag filters through the Scan Report Template API and retrieve those filters in exported template definitions.
| New or Updated API | Updated |
| API Endpoint | /api/7.0/fo/report/template/scan/ |
| EOS Timeline: April 2027 | |
| EOL Timeline: October 2027 | |
| API Endpoint (New Version) |
/api/8.0/fo/report/template/scan/ |
| Method | POST, GET |
| DTD or XSD changes | No |
This API now supports vulnerability tag filtering through the new vuln_tag_set_include parameter. You can use this parameter to create and update scan report templates and retrieve configured tags when exporting templates. Reports generated from these templates include only vulnerabilities associated with the specified tags. This helps to automate the creation and management of vulnerability-tag-based report templates.
Existing scan report template API workflows remain unchanged when vulnerability tags are not specified.
Input ParameterInput Parameter
| Parameter | Required/Optional | Data Type | Description |
|---|---|---|---|
| vuln_tag_set_include={tag_name1, tag_name2...]} | Optional | String | Specify one or more existing Vulnerability Tag names. Reports generated from this template include only vulnerabilities carrying at least one specified tag. |
Sample - Create Scan Report Template to Include Vulnerability Tag NamesSample - Create Scan Report Template to Include Vulnerability Tag Names
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?action=create&report_format=xml' \
--header 'X-Requested-With: curl' \
--header 'Content-Type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:49:26Z</DATETIME>
<TEXT>Scan Report Template(s) Successfully Created.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437136</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Update Scan Report Template with Vulnerability Tag NamesSample - Update Scan Report Template with Vulnerability Tag Names
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?report_format=xml&template_id=10437135&action=update' \
--header 'X-Requested-With: curl' \
--header 'content-type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:51:34Z</DATETIME>
<TEXT>Scan Report Template Successfully Updated.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437135</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Delete Scan Report TemplateSample - Delete Scan Report Template
API Request
curl --location ' /api/8.0/fo/report/template/scan/?action=delete&report_format=xml' \
--header 'X-Requested-With: curl' \
--header 'Content-Type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:49:26Z</DATETIME>
<TEXT>Scan Report Template(s) Successfully Deleted.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437136</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Export Scan Report TemplateSample - Export Scan Report Template
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?action=export&report_format=xml&template_id=10437135' \
--header 'X-Requested-With: curl'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE REPORTTEMPLATE SYSTEM "<qualys_base_url>/api/8.0/fo/report/template/scan/scanreporttemplate_info.dtd">
<REPORTTEMPLATE>
<SCANTEMPLATE>
<TITLE>
<INFO key="template_id">
<![CDATA[10437135]]>
</INFO>
<INFO key="title">
<![CDATA[all_1]]>
</INFO>
<INFO key="owner">
<![CDATA[221146]]>
</INFO>
</TITLE>
<TARGET>
<INFO key="scan_selection">
<![CDATA[HostBased]]>
</INFO>
<INFO key="include_trending">
<![CDATA[0]]>
</INFO>
<INFO key="asset_groups">
<![CDATA[All]]>
</INFO>
<INFO key="network">
<![CDATA[-100]]>
</INFO>
<INFO key="ips">
<![CDATA[]]>
</INFO>
<INFO key="ipv6">
<![CDATA[]]>
</INFO>
<INFO key="ipv6_network">
<![CDATA[-100]]>
</INFO>
<INFO key="host_with_cloud_agents">
<![CDATA[]]>
</INFO>
<INFO key="fqdns">
<![CDATA[]]>
</INFO>
</TARGET>
<DISPLAY>
<INFO key="graph_business_risk">
<![CDATA[0]]>
</INFO>
<INFO key="graph_vuln_over_time">
<![CDATA[0]]>
</INFO>
<INFO key="display_text_summary">
<![CDATA[1]]>
</INFO>
<INFO key="graph_status">
<![CDATA[0]]>
</INFO>
<INFO key="graph_potential_status">
<![CDATA[0]]>
</INFO>
<INFO key="graph_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_potential_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_ig_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_categories">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_vulns">
<![CDATA[0]]>
</INFO>
<INFO key="graph_os">
<![CDATA[0]]>
</INFO>
<INFO key="graph_services">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_ports">
<![CDATA[0]]>
</INFO>
<INFO key="display_custom_footer">
<![CDATA[0]]>
</INFO>
<INFO key="display_custom_footer_text">
<![CDATA[]]>
</INFO>
<INFO key="sort_by">
<![CDATA[host]]>
</INFO>
<INFO key="cvss">
<![CDATA[all]]>
</INFO>
<INFO key="host_details">
<![CDATA[0]]>
</INFO>
<INFO key="host_ag_details">
<![CDATA[0]]>
</INFO>
<INFO key="qualys_system_ids">
<![CDATA[0]]>
</INFO>
<INFO key="include_text_summary">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_threat">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_impact">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_solution">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_vpatch">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_compliance">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_exploit">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_malware">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_results">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_appendix">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_account_id">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_reopened">
<![CDATA[0]]>
</INFO>
<INFO key="metadata_ec2_instances">
<![CDATA[0]]>
</INFO>
<INFO key="cloud_provider_metadata">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_detection_logic">
<![CDATA[0]]>
</INFO>
<INFO key="include_trurisk_details">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_detection_source">
<![CDATA[0]]>
</INFO>
<INFO key="trurisk_elimination_status">
<![CDATA[0]]>
</INFO>
<INFO key="mitre_attack_details">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_deep_scan_results">
<![CDATA[0]]>
</INFO>
<INFO key="display_risk_exception_type">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_qualys_patchable">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_qualys_mitigable">
<![CDATA[1]]>
</INFO>
</DISPLAY>
<FILTER>
<INFO key="selective_vulns">
<![CDATA[complete]]>
</INFO>
<INFO key="search_list_ids">
<![CDATA[]]>
</INFO>
<INFO key="exclude_qid_option">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_search_list_ids">
<![CDATA[]]>
</INFO>
<INFO key="included_os">
<![CDATA[ALL]]>
</INFO>
<INFO key="status_new">
<![CDATA[1]]>
</INFO>
<INFO key="status_active">
<![CDATA[1]]>
</INFO>
<INFO key="status_reopen">
<![CDATA[1]]>
</INFO>
<INFO key="status_fixed">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_active">
<![CDATA[1]]>
</INFO>
<INFO key="vuln_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="potential_active">
<![CDATA[0]]>
</INFO>
<INFO key="potential_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="potential_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="ig_active">
<![CDATA[0]]>
</INFO>
<INFO key="ig_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="ig_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="display_non_running_kernels">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_non_running_kernel">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_non_running_services">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_superceded_patches">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_qids_not_exploitable_due_to_configuration">
<![CDATA[0]]>
</INFO>
<INFO key="categories_list">
<![CDATA[ALL]]>
</INFO>
<INFO key="qds_score_min">
<![CDATA[]]>
</INFO>
<INFO key="qds_score_max">
<![CDATA[]]>
</INFO>
<INFO key="included_detection_sources">
<![CDATA[ALL]]>
</INFO>
<INFO key="vuln_tag_set_include">
<![CDATA[ATS-2001-UI Changes,ATS-2001-UI Change -2,Create New Tag]]>
</INFO>
<INFO key="vuln_ignored_false_positive">
<![CDATA[1]]>
</INFO>
<INFO key="vuln_ignored_risk_accepted">
<![CDATA[1]]>
</INFO>
<INFO key="threat_ignored_false_positive">
<![CDATA[1]]>
</INFO>
<INFO key="threat_ignored_risk_accepted">
<![CDATA[1]]>
</INFO>
</FILTER>
<SERVICESPORTS>
<INFO key="required_services">
<![CDATA[]]>
</INFO>
<INFO key="unauthorized_services">
<![CDATA[]]>
</INFO>
<INFO key="services_info">
<![CDATA[]]>
</INFO>
<INFO key="required_ports">
<![CDATA[]]>
</INFO>
<INFO key="unauthorized_ports">
<![CDATA[]]>
</INFO>
</SERVICESPORTS>
<USERACCESS>
<INFO key="global">
<![CDATA[0]]>
</INFO>
<INFO key="report_access_users">
<![CDATA[]]>
</INFO>
</USERACCESS>
</SCANTEMPLATE>
</REPORTTEMPLATE>
- Vulnerability Tag is visible only if you have a Vulnerability Management Reporting Service (VMRS) enabled account. Contact your TAM or Qualys Support to enable this tag.
Enhancement
Reduce API Response Size by Excluding Ticket History
What Changed For You
You can now use the new input parameter in the Remediation Ticket List API to exclude ticket history from the API response when historical ticket activity is not required.
| New or Updated API | Updated |
| API Endpoint | /msp/ticket_list.php |
| Method | GET |
| DTD or XSD changes | No |
You can now reduce the size of Remediation Ticket List API responses by excluding the HISTORY_LIST element from ticket records. Previously, the API always returned historical ticket activity in the response, which could increase the response size for tickets with extensive history. This enhancement helps optimize API responses and supports integrations that require current ticket information without historical ticket data.
Input ParameterInput Parameter
| Parameter | Required/Optional | Data Type | Description |
|---|---|---|---|
| exclude_history_list={0|1} | Optional | Integer | Specify 1 to exclude the history list element from each ticket in the response
Specify 0 (default) to include the history list elements for each ticket in the response. |
Sample - To exclude the ticket history with the input parameter set to 1Sample - To exclude the ticket history with the input parameter set to 1
API Request
curl --location '<qualys_base_url>/msp/ticket_list.php?ips=x.x.x.xxx&exclude_history_list=1' \
--header 'X-Requested-With: curl' \
--header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE REMEDIATION_TICKETS SYSTEM "<qualys_base_url>/ticket_list_output.dtd">
<REMEDIATION_TICKETS>
<HEADER>
<USER_LOGIN>username</USER_LOGIN>
<COMPANY>
<![CDATA[VMSP]]>
</COMPANY>
<DATETIME>2026-09-23T06:20:13Z</DATETIME>
<WHERE>
<IPS>x.x.x.xxx</IPS><>1
</>
</WHERE>
</HEADER>
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<TICKET_LIST>
<TICKET>
<NUMBER>27974</NUMBER>
<CREATION_DATETIME>2023-07-12T12:43:19Z</CREATION_DATETIME>
<DUE_DATETIME>2023-07-19T12:43:19Z</DUE_DATETIME>
<CURRENT_STATE>CLOSED</CURRENT_STATE>
<CURRENT_STATUS>IGNORED</CURRENT_STATUS>
<INVALID>0</INVALID>
<ASSIGNEE>
<NAME>
<![CDATA[username]]>
</NAME>
<EMAIL>
<![CDATA[email]]>
</EMAIL>
<LOGIN>vmsp_ag1</LOGIN>
</ASSIGNEE>
<DETECTION>
<IP network_id="0">x.x.x.xxx</IP>
<DNSNAME>
<![CDATA[cswsuss01]]>
</DNSNAME>
<PORT>10005</PORT>
<SERVICE>General remote services</SERVICE>
<PROTOCOL>tcp</PROTOCOL>
<SSL>TRUE</SSL>
</DETECTION>
<STATS>
<FIRST_FOUND_DATETIME>2023-07-12T12:43:19Z</FIRST_FOUND_DATETIME>
<LAST_FOUND_DATETIME>2023-07-12T12:43:19Z</LAST_FOUND_DATETIME>
<LAST_SCAN_DATETIME>2023-07-12T12:43:19Z</LAST_SCAN_DATETIME>
<TIMES_FOUND>1</TIMES_FOUND>
<TIMES_NOT_FOUND>0</TIMES_NOT_FOUND>
<LAST_OPEN_DATETIME>2023-07-12T12:43:19Z</LAST_OPEN_DATETIME>
<LAST_IGNORED_DATETIME>2025-03-19T12:48:04Z</LAST_IGNORED_DATETIME>
</STATS>
<VULNINFO>
<TITLE>
<![CDATA[SSL Certificate - Subject Common Name Does Not Match Server FQDN]]>
</TITLE>
<TYPE>POSS</TYPE>
<QID>38170</QID>
<SEVERITY>2</SEVERITY>
<STANDARD_SEVERITY>2</STANDARD_SEVERITY>
</VULNINFO>
</TICKET>
<TICKET>
<NUMBER>27975</NUMBER>
<CREATION_DATETIME>2023-07-12T12:43:19Z</CREATION_DATETIME>
<DUE_DATETIME>2025-03-20T12:42:41Z</DUE_DATETIME>
<CURRENT_STATE>OPEN</CURRENT_STATE>
<CURRENT_STATUS>REOPENED</CURRENT_STATUS>
<INVALID>0</INVALID>
<ASSIGNEE>
<NAME>
<![CDATA[username]]>
</NAME>
<EMAIL>
<![CDATA[email]]>
</EMAIL>
<LOGIN>username</LOGIN>
</ASSIGNEE>
<DETECTION>
<IP network_id="0">x.x.x.xxx</IP>
<DNSNAME>
<![CDATA[cswsuss01]]>
</DNSNAME>
<PORT>5898</PORT>
<SERVICE>General remote services</SERVICE>
<PROTOCOL>tcp</PROTOCOL>
<SSL>TRUE</SSL>
</DETECTION>
<STATS>
<FIRST_FOUND_DATETIME>2023-07-12T12:43:19Z</FIRST_FOUND_DATETIME>
<LAST_FOUND_DATETIME>2023-07-12T12:43:19Z</LAST_FOUND_DATETIME>
<LAST_SCAN_DATETIME>2023-07-12T12:43:19Z</LAST_SCAN_DATETIME>
<TIMES_FOUND>1</TIMES_FOUND>
<TIMES_NOT_FOUND>0</TIMES_NOT_FOUND>
<LAST_OPEN_DATETIME>2025-03-20T12:45:02Z</LAST_OPEN_DATETIME>
<LAST_IGNORED_DATETIME>2025-03-19T12:40:29Z</LAST_IGNORED_DATETIME>
</STATS>
<VULNINFO>
<TITLE>
<![CDATA[SSL Certificate - Signature Verification Failed Vulnerability]]>
</TITLE>
<TYPE>POSS</TYPE>
<QID>38173</QID>
<SEVERITY>2</SEVERITY>
<STANDARD_SEVERITY>2</STANDARD_SEVERITY>
</VULNINFO>
</TICKET>
</TICKET_LIST>
Sample - To include the ticket history with the input parameter set to 0Sample - To include the ticket history with the input parameter set to 0
API Request
curl --location '
<qualys_base_url>/msp/ticket_list.php?ips=x.x.x.xxx&exclude_history_list=0' \
--header 'X-Requested-With: curl' \
--header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE REMEDIATION_TICKETS SYSTEM "<qualys_base_url>/ticket_list_output.dtd">
<REMEDIATION_TICKETS>
<HEADER>
<USER_LOGIN>username</USER_LOGIN>
<COMPANY>
<![CDATA[company name]]>
</COMPANY>
<DATETIME>2026-09-24T05:11:19Z</DATETIME>
<WHERE>
<IPS>x.x.x.xxx</IPS>
</WHERE>
</HEADER>
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<!-- keep-alive for Ticket List -->
<TICKET_LIST>
<TICKET>
<NUMBER>27974</NUMBER>
<CREATION_DATETIME>2023-07-12T12:43:19Z</CREATION_DATETIME>
<DUE_DATETIME>2023-07-19T12:43:19Z</DUE_DATETIME>
<CURRENT_STATE>CLOSED</CURRENT_STATE>
<CURRENT_STATUS>IGNORED</CURRENT_STATUS>
<INVALID>0</INVALID>
<ASSIGNEE>
<NAME>
<![CDATA[username]]>
</NAME>
<EMAIL>
<![CDATA[email]]>
</EMAIL>
<LOGIN>username</LOGIN>
</ASSIGNEE>
<DETECTION>
<IP network_id="0">x.x.x.xxx</IP>
<DNSNAME>
<![CDATA[cswsuss01]]>
</DNSNAME>
<PORT>10005</PORT>
<SERVICE>General remote services</SERVICE>
<PROTOCOL>tcp</PROTOCOL>
<SSL>TRUE</SSL>
</DETECTION>
<STATS>
<FIRST_FOUND_DATETIME>2023-07-12T12:43:19Z</FIRST_FOUND_DATETIME>
<LAST_FOUND_DATETIME>2023-07-12T12:43:19Z</LAST_FOUND_DATETIME>
<LAST_SCAN_DATETIME>2023-07-12T12:43:19Z</LAST_SCAN_DATETIME>
<TIMES_FOUND>1</TIMES_FOUND>
<TIMES_NOT_FOUND>0</TIMES_NOT_FOUND>
<LAST_OPEN_DATETIME>2023-07-12T12:43:19Z</LAST_OPEN_DATETIME>
<LAST_IGNORED_DATETIME>2025-03-19T12:48:04Z</LAST_IGNORED_DATETIME>
</STATS>
<HISTORY_LIST>
<HISTORY>
<DATETIME>2025-03-19T12:48:04Z</DATETIME>
<ACTOR>vmsp_ag1</ACTOR>
<STATE>
<OLD>OPEN</OLD>
<NEW>IGNORED</NEW>
</STATE>
<COMMENT>
<![CDATA[comment]]>
</COMMENT>
</HISTORY>
</HISTORY_LIST>
<VULNINFO>
<TITLE>
<![CDATA[SSL Certificate - Subject Common Name Does Not Match Server FQDN]]>
</TITLE>
<TYPE>POSS</TYPE>
<QID>38170</QID>
<SEVERITY>2</SEVERITY>
<STANDARD_SEVERITY>2</STANDARD_SEVERITY>
</VULNINFO>
</TICKET>
<TICKET>
<NUMBER>27975</NUMBER>
<CREATION_DATETIME>2023-07-12T12:43:19Z</CREATION_DATETIME>
<DUE_DATETIME>2025-03-20T12:42:41Z</DUE_DATETIME>
<CURRENT_STATE>OPEN</CURRENT_STATE>
<CURRENT_STATUS>REOPENED</CURRENT_STATUS>
<INVALID>0</INVALID>
<ASSIGNEE>
<NAME>
<![CDATA[Aditya Gangadharan]]>
</NAME>
<EMAIL>
<![CDATA[[email protected]]]>
</EMAIL>
<LOGIN>username</LOGIN>
</ASSIGNEE>
<DETECTION>
<IP network_id="0">x.x.x.xxx</IP>
<DNSNAME>
<![CDATA[cswsuss01]]>
</DNSNAME>
<PORT>5898</PORT>
<SERVICE>General remote services</SERVICE>
<PROTOCOL>tcp</PROTOCOL>
<SSL>TRUE</SSL>
</DETECTION>
<STATS>
<FIRST_FOUND_DATETIME>2023-07-12T12:43:19Z</FIRST_FOUND_DATETIME>
<LAST_FOUND_DATETIME>2023-07-12T12:43:19Z</LAST_FOUND_DATETIME>
<LAST_SCAN_DATETIME>2023-07-12T12:43:19Z</LAST_SCAN_DATETIME>
<TIMES_FOUND>1</TIMES_FOUND>
<TIMES_NOT_FOUND>0</TIMES_NOT_FOUND>
<LAST_OPEN_DATETIME>2025-03-20T12:45:02Z</LAST_OPEN_DATETIME>
<LAST_IGNORED_DATETIME>2025-03-19T12:40:29Z</LAST_IGNORED_DATETIME>
</STATS>
<HISTORY_LIST>
<HISTORY>
<DATETIME>2025-03-20T12:45:02Z</DATETIME>
<ACTOR>SYSTEM</ACTOR>
<STATE>
<OLD>IGNORED</OLD>
<NEW>OPEN</NEW>
</STATE>
</HISTORY>
<HISTORY>
<DATETIME>2025-03-19T12:40:29Z</DATETIME>
<ACTOR>username</ACTOR>
<STATE>
<OLD>OPEN</OLD>
<NEW>IGNORED</NEW>
</STATE>
<COMMENT>
<![CDATA[dual topic]]>
</COMMENT>
</HISTORY>
</HISTORY_LIST>
<VULNINFO>
<TITLE>
<![CDATA[SSL Certificate - Signature Verification Failed Vulnerability]]>
</TITLE>
<TYPE>POSS</TYPE>
<QID>38173</QID>
<SEVERITY>2</SEVERITY>
<STANDARD_SEVERITY>2</STANDARD_SEVERITY>
</VULNINFO>
</TICKET>
</TICKET_LIST>
</REMEDIATION_TICKETS>
New Feature
Perform Authenticated Vulnerability Scans on Oracle Linux Virtualization Manager Assets
What's New for You
You can now create, update, delete, and list Oracle Linux Virtualization Manager (OLVM) authentication records to perform Vulnerability Management scans on OLVM assets. You can configure OLVM authentication records using either basic or vault-based authentication.
This enhancement extends OLVM support to Vulnerability Management, enabling authenticated scanning and option profile configuration for OLVM environments through the following APIs. This helps to automate authenticated vulnerability scanning for OLVM environments and manage OLVM authentication records through APIs.
Authentication API
| New or Updated API | Updated |
| API Endpoint |
/api/2.0/fo/auth/olvm/ /api/3.0/fo/auth/olvm/ |
| Method | POST, GET |
| DTD or XSD changes | Yes |
You can create, update, delete, and list OLVM authentication records using either basic or vault-based authentication.
This is applicable to both versions 2.0 and 3.0.
Sample - Create OLVM Authentication Record Sample - Create OLVM Authentication Record
API Request
curl location
request POST '<qualys_base_url>/api/3.0/fo/auth/olvm/?action=create&login_type=basic&ips=xx.xx.xx.xx&username=<username>&password=<password>&port=443&title=OLVMAPTest3&ssl_verify_with_host=0&comments=API4'
header 'X-Requested-With: curl demo'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE BATCH_RETURN SYSTEM "<qualys_base_url>/api/3.0/batch_return.dtd">
<BATCH_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:16:30Z</DATETIME>
<BATCH_LIST>
<BATCH>
<TEXT>Successfully Created</TEXT>
<ID_SET>
<ID>9563327</ID>
</ID_SET>
</BATCH>
</BATCH_LIST>
</RESPONSE>
</BATCH_RETURN>
Sample - Update OLVM Authentication Record Sample - Update OLVM Authentication Record
API Request
curl location
request POST '<qualys_base_url>/api/3.0/fo/auth/olvm/?action=update&login_type=basic&ips=2620%3A149%3Abb%3Ab810%3A%3A1&username=test1&password=test%40123&title=OLVMAPI11&comments=APITest3&ids=9563326'
header 'X-Requested-With: curl demo'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE BATCH_RETURN SYSTEM "<qualys_base_url>/api/3.0/batch_return.dtd">
<BATCH_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:13:37Z</DATETIME>
<BATCH_LIST>
<BATCH>
<TEXT>Successfully Updated</TEXT>
<ID_SET>
<ID>9563326</ID>
</ID_SET>
</BATCH>
</BATCH_LIST>
</RESPONSE>
</BATCH_RETURN>
Sample - List OLVM Authentication Records Sample - List OLVM Authentication Records
API Request
curl location
request POST '<qualys_base_url>/api/3.0/fo/auth/olvm/?action=list'
header 'X-Requested-With: curl demo'
header 'Content-type: text/xml'
header 'Authorization: Bearer <JWT Token>'
header 'Cookie: DWRSESSIONID=8d598b6b6744056a5c6a11af6357a1c6; QualysSession=7d5ead5820974e3ba8f10f704978d115'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE AUTH_OLVM_LIST_OUTPUT SYSTEM "
<qualys_base_url>/api/3.0/fo/auth/olvm/auth_olvm_list_output.dtd">
<AUTH_OLVM_LIST_OUTPUT>
<RESPONSE>
<DATETIME>2026-08-21T07:16:17Z</DATETIME>
<AUTH_OLVM_LIST>
<AUTH_OLVM>
<ID>9563323</ID>
<TITLE>
<![CDATA[OLVMAPTest]]>
</TITLE>
<USERNAME>
<![CDATA[test]]>
</USERNAME>
<SSL_VERIFY>
<![CDATA[0]]>
</SSL_VERIFY>
<IP_SET>
<IP>10.10.10.4</IP>
</IP_SET>
<PORT>
<![CDATA[443]]>
</PORT>
<SSL_VERIFY_WITH_HOST>
<![CDATA[0]]>
</SSL_VERIFY_WITH_HOST>
<LOGIN_TYPE>
<![CDATA[basic]]>
</LOGIN_TYPE>
<NETWORK_ID>0</NETWORK_ID>
<CREATED>
<DATETIME>2026-08-21T07:11:31Z</DATETIME>
<BY>mayur_aa</BY>
</CREATED>
<LAST_MODIFIED>
<DATETIME>2026-08-21T07:11:31Z</DATETIME>
</LAST_MODIFIED>
<COMMENTS>
<![CDATA[API]]>
</COMMENTS>
</AUTH_OLVM>
<AUTH_OLVM>
<ID>9563324</ID>
<TITLE>
<![CDATA[OLVMAPTest1]]>
</TITLE>
<USERNAME>
<![CDATA[test]]>
</USERNAME>
<SSL_VERIFY>
<![CDATA[0]]>
</SSL_VERIFY>
<IP_SET>
<IP>xx.xx.xx.x</IP>
</IP_SET>
<PORT>
<![CDATA[443]]>
</PORT>
<SSL_VERIFY_WITH_HOST>
<![CDATA[0]]>
</SSL_VERIFY_WITH_HOST>
<LOGIN_TYPE>
<![CDATA[basic]]>
</LOGIN_TYPE>
<NETWORK_ID>0</NETWORK_ID>
<CREATED>
<DATETIME>2026-08-21T07:12:12Z</DATETIME>
<BY>mayur_aa</BY>
</CREATED>
<LAST_MODIFIED>
<DATETIME>2026-08-21T07:12:12Z</DATETIME>
</LAST_MODIFIED>
<COMMENTS>
<![CDATA[API2]]>
</COMMENTS>
</AUTH_OLVM>
<AUTH_OLVM>
<ID>9563325</ID>
<TITLE>
<![CDATA[OLVMAPTest2]]>
</TITLE>
<USERNAME>
<![CDATA[test]]>
</USERNAME>
<SSL_VERIFY>
<![CDATA[0]]>
</SSL_VERIFY>
<IP_SET>
<IP>xx.xx.xx.xx</IP>
</IP_SET>
<PORT>
<![CDATA[443]]>
</PORT>
<SSL_VERIFY_WITH_HOST>
<![CDATA[0]]>
</SSL_VERIFY_WITH_HOST>
<LOGIN_TYPE>
<![CDATA[basic]]>
</LOGIN_TYPE>
<NETWORK_ID>0</NETWORK_ID>
<CREATED>
<DATETIME>2026-08-21T07:12:39Z</DATETIME>
<BY>mayur_aa</BY>
</CREATED>
<LAST_MODIFIED>
<DATETIME>2026-08-21T07:12:39Z</DATETIME>
</LAST_MODIFIED>
<COMMENTS>
<![CDATA[API2]]>
</COMMENTS>
</AUTH_OLVM>
<AUTH_OLVM>
<ID>9563326</ID>
<TITLE>
<![CDATA[OLVMAPI11]]>
</TITLE>
<USERNAME>
<![CDATA[test1]]>
</USERNAME>
<SSL_VERIFY>
<![CDATA[0]]>
</SSL_VERIFY>
<IP_SET>
<IP>xxxx:xxx:bb:b810::1</IP>
</IP_SET>
<PORT>
<![CDATA[443]]>
</PORT>
<SSL_VERIFY_WITH_HOST>
<![CDATA[0]]>
</SSL_VERIFY_WITH_HOST>
<LOGIN_TYPE>
<![CDATA[basic]]>
</LOGIN_TYPE>
<NETWORK_ID>0</NETWORK_ID>
<CREATED>
<DATETIME>2026-08-21T07:13:05Z</DATETIME>
<BY>mayur_aa</BY>
</CREATED>
<LAST_MODIFIED>
<DATETIME>2026-08-21T07:13:37Z</DATETIME>
</LAST_MODIFIED>
<COMMENTS>
<![CDATA[APITest3]]>
</COMMENTS>
</AUTH_OLVM>
</AUTH_OLVM_LIST>
</RESPONSE>
</AUTH_OLVM_LIST_OUTPUT>
Sample - Delete OLVM Authentication Records Sample - Delete OLVM Authentication Records
API Request
curl location
request POST '<qualys_base_url>/api/3.0/fo/auth/olvm/?action=delete&ids=9563327'
header 'X-Requested-With: curl demo'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE BATCH_RETURN SYSTEM "<qualys_base_url>/api/3.0/batch_return.dtd">
<BATCH_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:16:43Z</DATETIME>
<BATCH_LIST>
<BATCH>
<TEXT>Successfully Deleted</TEXT>
<ID_SET>
<ID>9563327</ID>
</ID_SET>
</BATCH>
</BATCH_LIST>
</RESPONSE>
</BATCH_RETURN>
VM Option Profile, Import and Export Option Profile API
| New or Updated API | Updated |
| API Endpoint |
/api/5.0/fo/subscription/option_profile/vm/ /api/7.0/fo/subscription/option_profile/ |
| EOS Timeline: April 2027 | |
| EOL Timeline: October 2027 | |
| API Endpoint (New Version) |
/api/6.0/fo/subscription/option_profile/vm/ /api/8.0/fo/subscription/option_profile/ |
| Method | POST, GET |
| DTD or XSD changes | Yes |
You can perform the following actions:
- Create, update, list, and delete VM option profiles with OLVM included in the authentication list, so that scans launched with that profile include your OLVM authentication records.
- Import an option profile that includes OLVM in the authentication list, and export an option profile that has OLVM authentication enabled.
Sample - Create Option Profile for OLVM Authentication RecordSample - Create Option Profile for OLVM Authentication Record
API Request
curl location request POST '<qualys_base_url>/api/6.0/fo/subscription/option_profile/vm/?action=create&title=OnlyOLVM_APIv6_4&global=1&scan_tcp_ports=standard&scan_udp_ports=standard&scan_overall_performance=normal&vulnerability_detection=complete&basic_information_gathering=none&authentication=OLVM&test_authentication=1'
header 'X-Requested-With: curl'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/6.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:29:35Z</DATETIME>
<TEXT>Option profile successfully added.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>4241602</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Update Option Profile for OLVM Authentication RecordSample - Update Option Profile for OLVM Authentication Record
API Request
curl location
request POST '<qualys_base_url>/api/6.0/fo/subscription/option_profile/vm/?action=update&title=UpdateToOLVMOnly_APIv6_2&global=1&scan_tcp_ports=standard&scan_udp_ports=standard&scan_overall_performance=normal&vulnerability_detection=complete&basic_information_gathering=none&authentication=OLVM&test_authentication=0&id=4241600'
header 'X-Requested-With: curl'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/6.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:27:01Z</DATETIME>
<TEXT>Option profile successfully updated.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>4241600</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - List Option Profile for OLVM Authentication RecordSample - List Option Profile for OLVM Authentication Record
API Request
curl location '<qualys_base_url>/api/6.0/fo/subscription/option_profile/vm/?action=list'
header 'X-Requested-With: curl demo32' header 'Cache-Control: no-cache'
header 'Accept: */*'
header 'Accept-Encoding: gzip, deflate, br' header 'Content-Type: text/xml'
header 'Authorization: Bearer <JWT Token>'
header 'Cookie: DWRSESSIONID=30a1b6ea31630d2edfc86b1125973857;
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE OPTION_PROFILES SYSTEM "
<qualys_base_url>/api/6.0/fo/subscription/option_profile/option_profile_info.dtd">
<OPTION_PROFILES>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4241488</ID>
<GROUP_NAME>
<![CDATA[TestAuthenticationOLVM_API]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-21T03:48:15Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[Windows,Unix,Oracle,Oracle Listener,SNMP,VMware,DB2,HTTP,MySQL,MongoDB,Tomcat Server,Oracle Weblogic Server,Palo Alto Networks Firewall,Jboss Server,InformixDB,Ms Exchange Server,Sybase,NSX]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
<TEST_AUTHENTICATION>1</TEST_AUTHENTICATION>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>none</BASIC_INFO_GATHERING_ON>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>0</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
........
<OPTION_PROFILE>
<BASIC_INFO>
<ID>2813003</ID>
<GROUP_NAME>
<![CDATA[2008 SANS20 Options]]>
</GROUP_NAME>
<GROUP_TYPE>sans20</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2025-03-17T12:14:34Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>0</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>0</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>30</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>10</TOTAL_PROCESSES>
<HTTP_PROCESSES>10</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
</PERFORMANCE>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<PASSWORD_BRUTE_FORCING>
<SYSTEM>
<HAS_SYSTEM>1</HAS_SYSTEM>
<SYSTEM_LEVEL>Limited</SYSTEM_LEVEL>
</SYSTEM>
</PASSWORD_BRUTE_FORCING>
<VULNERABILITY_DETECTION>
<CUSTOM_LIST>
<CUSTOM>
<ID>1819613</ID>
<TITLE>
<![CDATA[Option Profile: 2008 SANS20 Options]]>
</TITLE>
</CUSTOM>
</CUSTOM_LIST>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>0</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>all</BASIC_INFO_GATHERING_ON>
<TCP_PORTS>
<TCP_PORTS_STANDARD_SCAN>1</TCP_PORTS_STANDARD_SCAN>
</TCP_PORTS>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>1</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>1</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>0</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>0</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
</OPTION_PROFILES>
Sample - Delete Option Profile for OLVM Authentication RecordSample - Delete Option Profile for OLVM Authentication Record
API Request
curl location
request POST '<qualys_base_url>/api/6.0/fo/subscription/option_profile/vm/?action=delete&id=4241602'
header 'X-Requested-With: curl'
header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/6.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-08-21T07:30:38Z</DATETIME>
<TEXT>Option Profile Deleted Successfully</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>4241602</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Import Option Profile for OLVM Authentication RecordSample - Import Option Profile for OLVM Authentication Record
API Request
curl location '
<qualys_base_url>/api/8.0/fo/subscription/option_profile/?action=import'
header 'X-Requested-With: curl demo32'
header 'Cache-Control: no-cache'
header 'Accept: */*'
header 'Accept-Encoding: gzip, deflate, br' header 'Content-Type: text/xml' header 'Authorization: Bearer <JWT Token>'
header 'Cookie: DWRSESSIONID=30a1b6ea31630d2edfc86b1125973857;
<OPTION_PROFILES>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>1</ID>
<GROUP_NAME>
<![CDATA[MyImportedProfileOLVM]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (Manager: test_tn4 )]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>0</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-01-01T00:00:00Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PERFORMANCE>
<PARALLEL_SCALING>0</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>30</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>10</TOTAL_PROCESSES>
<HTTP_PROCESSES>10</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
</PERFORMANCE>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[OLVM]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<TEST_AUTHENTICATION>0</TEST_AUTHENTICATION>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>all</BASIC_INFO_GATHERING_ON>
<TCP_PORTS>
<TCP_PORTS_STANDARD_SCAN>1</TCP_PORTS_STANDARD_SCAN>
</TCP_PORTS>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>1</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>1</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>0</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>0</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
</OPTION_PROFILES>
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-08-26T06:19:27Z</DATETIME>
<TEXT>Successfully imported Option profile for the subscription Id 1325908</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>4246092</KEY>
<VALUE>My Imported Profile</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
Sample - Export Option Profile for OLVM Authentication RecordSample - Export Option Profile for OLVM Authentication Record
API Request
curl location '<qualys_base_url>/api/8.0/fo/subscription/option_profile/?action=export' header 'X-Requested-With: curl demo32' header 'Cache-Control: no-cache' header 'Accept: */*' header 'Accept-Encoding: gzip, deflate, br' header 'Content-Type: text/xml' header 'Authorization: Bearer <JWT Token>'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE OPTION_PROFILES SYSTEM "<qualys_base_url>/api/8.0/fo/subscription/option_profile/option_profile_info.dtd">
<OPTION_PROFILES>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4241488</ID>
<GROUP_NAME>
<![CDATA[TestAuthenticationOLVM_API]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-21T03:48:15Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[Windows,Unix,Oracle,Oracle Listener,SNMP,VMware,DB2,HTTP,MySQL,MongoDB,Tomcat Server,Oracle Weblogic Server,Palo Alto Networks Firewall,Jboss Server,InformixDB,Ms Exchange Server,Sybase,NSX]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
<TEST_AUTHENTICATION>1</TEST_AUTHENTICATION>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>none</BASIC_INFO_GATHERING_ON>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>0</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4241489</ID>
<GROUP_NAME>
<![CDATA[OnlyOLVM_API]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-21T03:48:50Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[OLVM]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>none</BASIC_INFO_GATHERING_ON>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>0</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4240748</ID>
<GROUP_NAME>
<![CDATA[TestOLVM1]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>1</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-19T11:28:41Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[Windows,Unix,Oracle,Oracle Listener,SNMP,VMware,DB2,HTTP,MySQL,MongoDB,Tomcat Server,Oracle Weblogic Server,Palo Alto Networks Firewall,Jboss Server,Sybase,NSX,OLVM]]>
</AUTHENTICATION>
<AUTHENTICATION_LEAST_PRIVILEGE>
<![CDATA[Unix]]>
</AUTHENTICATION_LEAST_PRIVILEGE>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
<TEST_AUTHENTICATION>1</TEST_AUTHENTICATION>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>register</BASIC_INFO_GATHERING_ON>
<TCP_PORTS>
<TCP_PORTS_STANDARD_SCAN>1</TCP_PORTS_STANDARD_SCAN>
</TCP_PORTS>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>1</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4241598</ID>
<GROUP_NAME>
<![CDATA[OnlyOLVM_APIv6]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-21T07:18:51Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[OLVM]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>none</BASIC_INFO_GATHERING_ON>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>0</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>4241599</ID>
<GROUP_NAME>
<![CDATA[OnlyOLVM_APIv6_1]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>0</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2026-08-21T07:20:59Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>50</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>20</TOTAL_PROCESSES>
<HTTP_PROCESSES>20</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[OLVM]]>
</AUTHENTICATION>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>none</BASIC_INFO_GATHERING_ON>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>0</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
<OPTION_PROFILE>
<BASIC_INFO>
<ID>2813001</ID>
<GROUP_NAME>
<![CDATA[Qualys Recommended Option Profile]]>
</GROUP_NAME>
<GROUP_TYPE>user</GROUP_TYPE>
<USER_ID>
<![CDATA[Test NativeIPV6 (test_tn4)]]>
</USER_ID>
<UNIT_ID>0</UNIT_ID>
<SUBSCRIPTION_ID>1325908</SUBSCRIPTION_ID>
<IS_DEFAULT>1</IS_DEFAULT>
<IS_GLOBAL>1</IS_GLOBAL>
<IS_OFFLINE_SYNCABLE>0</IS_OFFLINE_SYNCABLE>
<UPDATE_DATE>2025-03-17T12:14:33Z</UPDATE_DATE>
</BASIC_INFO>
<SCAN>
<PORTS>
<TCP_PORTS>
<TCP_PORTS_TYPE>standard</TCP_PORTS_TYPE>
<THREE_WAY_HANDSHAKE>0</THREE_WAY_HANDSHAKE>
</TCP_PORTS>
<UDP_PORTS>
<UDP_PORTS_TYPE>standard</UDP_PORTS_TYPE>
</UDP_PORTS>
<AUTHORITATIVE_OPTION>0</AUTHORITATIVE_OPTION>
</PORTS>
<SCAN_DEAD_HOSTS>0</SCAN_DEAD_HOSTS>
<PURGE_OLD_HOST_OS_CHANGED>1</PURGE_OLD_HOST_OS_CHANGED>
<PERFORMANCE>
<PARALLEL_SCALING>1</PARALLEL_SCALING>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<HOSTS_TO_SCAN>
<EXTERNAL_SCANNERS>15</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>30</SCANNER_APPLIANCES>
</HOSTS_TO_SCAN>
<PROCESSES_TO_RUN>
<TOTAL_PROCESSES>10</TOTAL_PROCESSES>
<HTTP_PROCESSES>10</HTTP_PROCESSES>
</PROCESSES_TO_RUN>
<PACKET_DELAY>Medium</PACKET_DELAY>
<PORT_SCANNING_AND_HOST_DISCOVERY>Normal</PORT_SCANNING_AND_HOST_DISCOVERY>
<HOST_CGI_CHECKS>0</HOST_CGI_CHECKS>
<MAX_TARGETS_PER_SLICE>0</MAX_TARGETS_PER_SLICE>
<CONF_SCAN_LIMITED_CONNECTIVITY>0</CONF_SCAN_LIMITED_CONNECTIVITY>
<SKIP_PRE_SCANNING>0</SKIP_PRE_SCANNING>
<SCAN_MULTIPLE_SLICES_PER_SCANNER>0</SCAN_MULTIPLE_SLICES_PER_SCANNER>
</PERFORMANCE>
<ALLOW_ON_HOST_SCRIPT_EXECUTION>0</ALLOW_ON_HOST_SCRIPT_EXECUTION>
<LOAD_BALANCER_DETECTION>0</LOAD_BALANCER_DETECTION>
<VULNERABILITY_DETECTION>
<COMPLETE>
<![CDATA[complete]]>
</COMPLETE>
<DETECTION_INCLUDE>
<BASIC_HOST_INFO_CHECKS>0</BASIC_HOST_INFO_CHECKS>
<OVAL_CHECKS>0</OVAL_CHECKS>
<QRDI_CHECKS>0</QRDI_CHECKS>
</DETECTION_INCLUDE>
</VULNERABILITY_DETECTION>
<AUTHENTICATION>
<![CDATA[Windows,Unix]]>
</AUTHENTICATION>
<AUTHENTICATION_LEAST_PRIVILEGE>
<![CDATA[Unix]]>
</AUTHENTICATION_LEAST_PRIVILEGE>
<ADDL_CERT_DETECTION>0</ADDL_CERT_DETECTION>
<DISSOLVABLE_AGENT>
<DISSOLVABLE_AGENT_ENABLE>1</DISSOLVABLE_AGENT_ENABLE>
<WINDOWS_SHARE_ENUMERATION_ENABLE>0</WINDOWS_SHARE_ENUMERATION_ENABLE>
</DISSOLVABLE_AGENT>
</SCAN>
<MAP>
<BASIC_INFO_GATHERING_ON>register</BASIC_INFO_GATHERING_ON>
<TCP_PORTS>
<TCP_PORTS_STANDARD_SCAN>1</TCP_PORTS_STANDARD_SCAN>
</TCP_PORTS>
<MAP_OPTIONS>
<PERFORM_LIVE_HOST_SWEEP>1</PERFORM_LIVE_HOST_SWEEP>
<DISABLE_DNS_TRAFFIC>0</DISABLE_DNS_TRAFFIC>
</MAP_OPTIONS>
<MAP_PERFORMANCE>
<OVERALL_PERFORMANCE>Normal</OVERALL_PERFORMANCE>
<MAP_PARALLEL>
<EXTERNAL_SCANNERS>6</EXTERNAL_SCANNERS>
<SCANNER_APPLIANCES>8</SCANNER_APPLIANCES>
<NETBLOCK_SIZE>16384 IPs</NETBLOCK_SIZE>
</MAP_PARALLEL>
<PACKET_DELAY>Minimum</PACKET_DELAY>
</MAP_PERFORMANCE>
<MAP_AUTHENTICATION>none</MAP_AUTHENTICATION>
</MAP>
<ADDITIONAL>
<HOST_DISCOVERY>
<TCP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</TCP_PORTS>
<UDP_PORTS>
<STANDARD_SCAN>1</STANDARD_SCAN>
</UDP_PORTS>
<ICMP>0</ICMP>
</HOST_DISCOVERY>
<PACKET_OPTIONS>
<IGNORE_FIREWALL_GENERATED_TCP_RST>1</IGNORE_FIREWALL_GENERATED_TCP_RST>
<IGNORE_ALL_TCP_RST>0</IGNORE_ALL_TCP_RST>
<IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>1</IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK>
<NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>0</NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY>
</PACKET_OPTIONS>
</ADDITIONAL>
</OPTION_PROFILE>
</OPTION_PROFILES>
DTD OutputDTD Output
A DTD for Option Profile API has been added.
<platform API server>/api/8.0/fo/subscription/option_profile/option_profile_info.dtd
DTD output for Option Profile API is as follows:
DTD Output
<!ELEMENT OPTION_PROFILES (OPTION_PROFILE)*>
<!ELEMENT OPTION_PROFILE (BASIC_INFO, SCAN, MAP?, ADDITIONAL, INSTANCE_DATA_COLLECTION?,OS_BASED_INSTANCE_DISC_COLLECTION?)>
<!ELEMENT BASIC_INFO (ID, GROUP_NAME, GROUP_TYPE, USER_ID, UNIT_ID, SUBSCRIPTION_ID, IS_DEFAULT?, IS_GLOBAL?, IS_OFFLINE_SYNCABLE?, UPDATE_DATE?)>
<!ELEMENT ID (#PCDATA)>
<!ELEMENT GROUP_NAME (#PCDATA)>
<!ELEMENT GROUP_TYPE (#PCDATA)>
<!ELEMENT USER_ID (#PCDATA)>
<!ELEMENT UNIT_ID (#PCDATA)>
<!ELEMENT SUBSCRIPTION_ID (#PCDATA)>
<!ELEMENT IS_DEFAULT (#PCDATA)>
<!ELEMENT IS_GLOBAL (#PCDATA)>
<!ELEMENT IS_OFFLINE_SYNCABLE (#PCDATA)>
<!ELEMENT UPDATE_DATE (#PCDATA)>
<!ELEMENT SCAN (PORTS?, SCAN_DEAD_HOSTS?, CLOSE_VULNERABILITIES?, PURGE_OLD_HOST_OS_CHANGED?, PERFORMANCE?, ALLOW_ON_HOST_SCRIPT_EXECUTION?, LOAD_BALANCER_DETECTION?, PASSWORD_BRUTE_FORCING?, VULNERABILITY_DETECTION?, AUTHENTICATION?, AUTHENTICATION_LEAST_PRIVILEGE?, ADDL_CERT_DETECTION?, DISSOLVABLE_AGENT?, SCAN_RESTRICTION?, DATABASE_PREFERENCE_KEY?, SYSTEM_AUTH_RECORD?, LITE_OS_SCAN?, CUSTOM_HTTP_HEADER?, HOST_ALIVE_TESTING?, ETHERNET_IP_PROBING?, FILE_INTEGRITY_MONITORING?, CONTROL_TYPES?, DEAD_HOST_PROCESSING?, DO_NOT_OVERWRITE_OS?, TEST_AUTHENTICATION?, MAX_SCAN_DURATION_PER_ASSET?, PERFORM_PARTIAL_SSL_TLS_AUDITING?)>
<!ELEMENT PORTS (TCP_PORTS?, UDP_PORTS?, AUTHORITATIVE_OPTION?, (STANDARD_SCAN|TARGETED_SCAN)?)>
<!ELEMENT TCP_PORTS (TCP_PORTS_TYPE?, TCP_PORTS_STANDARD_SCAN?, TCP_PORTS_ADDITIONAL?, THREE_WAY_HANDSHAKE?, STANDARD_SCAN?, TCP_ADDITIONAL?)>
<!ELEMENT TCP_PORTS_TYPE (#PCDATA)>
<!ELEMENT TCP_PORTS_ADDITIONAL (HAS_ADDITIONAL?, ADDITIONAL_PORTS?)>
<!ELEMENT HAS_ADDITIONAL (#PCDATA)>
<!ELEMENT ADDITIONAL_PORTS (#PCDATA)>
<!ELEMENT THREE_WAY_HANDSHAKE (#PCDATA)>
<!ELEMENT UDP_PORTS (UDP_PORTS_TYPE?, UDP_PORTS_STANDARD_SCAN?, UDP_PORTS_ADDITIONAL?, (STANDARD_SCAN|CUSTOM_PORT)?)>
<!ELEMENT UDP_PORTS_TYPE (#PCDATA)>
<!ELEMENT UDP_PORTS_ADDITIONAL (HAS_ADDITIONAL?, ADDITIONAL_PORTS?)>
<!ELEMENT HAS_ADDITIONAL (#PCDATA)>
<!ELEMENT ADDITIONAL_PORTS (#PCDATA)>
<!ELEMENT AUTHORITATIVE_OPTION (#PCDATA)>
<!ELEMENT STANDARD_SCAN (#PCDATA)>
<!ELEMENT TARGETED_SCAN (#PCDATA)>
<!ELEMENT TCP_PORTS_STANDARD_SCAN (TCP_PORTS_TYPE?)>
<!ELEMENT TCP_ADDITIONAL (HAS_ADDITIONAL?, ADDITIONAL_PORTS?)>
<!ELEMENT UDP_PORTS_STANDARD_SCAN (UDP_PORTS_TYPE?)>
<!ELEMENT UDP_PORTS_ADDITIONAL (HAS_ADDITIONAL?, ADDITIONAL_PORTS?)>
<!ELEMENT CUSTOM_PORT (#PCDATA)>
<!ELEMENT SCAN_DEAD_HOSTS (#PCDATA)>
<!ELEMENT CLOSE_VULNERABILITIES (DAYS?)>
<!ELEMENT DAYS (#PCDATA)>
<!ELEMENT PURGE_OLD_HOST_OS_CHANGED (#PCDATA)>
<!ELEMENT PERFORMANCE (PARALLEL_SCALING?, OVERALL_PERFORMANCE?, HOSTS_TO_SCAN?, PROCESSES_TO_RUN?, PACKET_DELAY?, PORT_SCANNING_AND_HOST_DISCOVERY?, HOST_CGI_CHECKS?, MAX_TARGETS_PER_SLICE?, CONF_SCAN_LIMITED_CONNECTIVITY?, SKIP_PRE_SCANNING?, SCAN_MULTIPLE_SLICES_PER_SCANNER?, EXTERNAL_SCANNERS_TO_USE?)>
<!ELEMENT PARALLEL_SCALING (#PCDATA)>
<!ELEMENT OVERALL_PERFORMANCE (#PCDATA)>
<!ELEMENT HOSTS_TO_SCAN (EXTERNAL_SCANNERS?, SCANNER_APPLIANCES?)>
<!ELEMENT EXTERNAL_SCANNERS (#PCDATA)>
<!ELEMENT SCANNER_APPLIANCES (#PCDATA)>
<!ELEMENT PROCESSES_TO_RUN (TOTAL_PROCESSES?, HTTP_PROCESSES?)>
<!ELEMENT TOTAL_PROCESSES (#PCDATA)>
<!ELEMENT HTTP_PROCESSES (#PCDATA)>
<!ELEMENT PACKET_DELAY (#PCDATA)>
<!ELEMENT PORT_SCANNING_AND_HOST_DISCOVERY (#PCDATA)>
<!ELEMENT HOST_CGI_CHECKS (#PCDATA)>
<!ELEMENT MAX_TARGETS_PER_SLICE (#PCDATA)>
<!ELEMENT CONF_SCAN_LIMITED_CONNECTIVITY (#PCDATA)>
<!ELEMENT SKIP_PRE_SCANNING (#PCDATA)>
<!ELEMENT SCAN_MULTIPLE_SLICES_PER_SCANNER (#PCDATA)>
<!ELEMENT EXTERNAL_SCANNERS_TO_USE (#PCDATA)>
<!ELEMENT ALLOW_ON_HOST_SCRIPT_EXECUTION (0|1)>
<!ELEMENT LOAD_BALANCER_DETECTION (#PCDATA)>
<!ELEMENT PASSWORD_BRUTE_FORCING (SYSTEM?, CUSTOM?)>
<!ELEMENT SYSTEM (#PCDATA)>
<!ELEMENT CUSTOM (#PCDATA)>
<!ELEMENT VULNERABILITY_DETECTION (COMPLETE?, DETECTION_INCLUDE?, DETECTION_EXCLUDE?)>
<!ELEMENT COMPLETE (#PCDATA)>
<!ELEMENT DETECTION_INCLUDE (BASIC_HOST_INFO_CHECKS?, OVAL_CHECKS?, CLOUD_AGENT_CHECKS?, VULNERABILITY_SIGNATURES?)>
<!ELEMENT BASIC_HOST_INFO_CHECKS (#PCDATA)>
<!ELEMENT OVAL_CHECKS (#PCDATA)>
<!ELEMENT CLOUD_AGENT_CHECKS (#PCDATA)>
<!ELEMENT VULNERABILITY_SIGNATURES (#PCDATA)>
<!ELEMENT DETECTION_EXCLUDE (BASIC_HOST_INFO_CHECKS?, OVAL_CHECKS?, CLOUD_AGENT_CHECKS?, VULNERABILITY_SIGNATURES?)>
<!ELEMENT AUTHENTICATION (#PCDATA)>
<!ELEMENT AUTHENTICATION_LEAST_PRIVILEGE (#PCDATA)>
<!ELEMENT ADDL_CERT_DETECTION (#PCDATA)>
<!ELEMENT DISSOLVABLE_AGENT (DISSOLVABLE_AGENT_ENABLE?, PASSWORD_AUDITING_ENABLE?, WINDOWS_SHARE_ENUMERATION_ENABLE?, WINDOWS_DIRECTORY_SEARCH_ENABLE?)>
<!ELEMENT DISSOLVABLE_AGENT_ENABLE (#PCDATA)>
<!ELEMENT PASSWORD_AUDITING_ENABLE (#PCDATA)>
<!ELEMENT WINDOWS_SHARE_ENUMERATION_ENABLE (#PCDATA)>
<!ELEMENT WINDOWS_DIRECTORY_SEARCH_ENABLE (#PCDATA)>
<!ELEMENT SCAN_RESTRICTION (SCAN_BY_POLICY?)>
<!ELEMENT SCAN_BY_POLICY (POLICY_ID?, POLICY_NAME?)>
<!ELEMENT POLICY_ID (#PCDATA)>
<!ELEMENT POLICY_NAME (#PCDATA)>
<!ELEMENT DATABASE_PREFERENCE_KEY (MSSQL?, ORACLE?, SYBASE?, DB2?)>
<!ELEMENT MSSQL (ENABLE?, USER?, PASSWORD?)>
<!ELEMENT ENABLE (#PCDATA)>
<!ELEMENT USER (#PCDATA)>
<!ELEMENT PASSWORD (#PCDATA)>
<!ELEMENT ORACLE (ENABLE?, USER?, PASSWORD?)>
<!ELEMENT SYBASE (ENABLE?, USER?, PASSWORD?)>
<!ELEMENT DB2 (ENABLE?, USER?, PASSWORD?)>
<!ELEMENT SYSTEM_AUTH_RECORD (SYSTEM_AUTH_RECORD_ENABLE?, SYSTEM_AUTH_RECORD_TYPE?, SYSTEM_AUTH_RECORD_USERNAME?, SYSTEM_AUTH_RECORD_PASSWORD?)>
<!ELEMENT SYSTEM_AUTH_RECORD_ENABLE (#PCDATA)>
<!ELEMENT SYSTEM_AUTH_RECORD_TYPE (#PCDATA)>
<!ELEMENT SYSTEM_AUTH_RECORD_USERNAME (#PCDATA)>
<!ELEMENT SYSTEM_AUTH_RECORD_PASSWORD (#PCDATA)>
<!ELEMENT LITE_OS_SCAN (#PCDATA)>
<!ELEMENT CUSTOM_HTTP_HEADER (VALUE?, DEFINITION_KEY?, DEFINITION_VALUE?)>
<!ELEMENT VALUE (#PCDATA)>
<!ELEMENT DEFINITION_KEY (#PCDATA)>
<!ELEMENT DEFINITION_VALUE (#PCDATA)>
<!ELEMENT HOST_ALIVE_TESTING (#PCDATA)>
<!ELEMENT ETHERNET_IP_PROBING (#PCDATA)>
<!ELEMENT FILE_INTEGRITY_MONITORING (AUTO_UPDATE_EXPECTED_VALUE?)>
<!ELEMENT AUTO_UPDATE_EXPECTED_VALUE (#PCDATA)>
<!ELEMENT CONTROL_TYPES (FIM_CONTROLS_ENABLED?, CUSTOM_WMI_QUERY_CHECKS?)>
<!ELEMENT FIM_CONTROLS_ENABLED (#PCDATA)>
<!ELEMENT CUSTOM_WMI_QUERY_CHECKS (CHECK?)>
<!ELEMENT CHECK (CHECK_ID?, CHECK_NAME?)>
<!ELEMENT CHECK_ID (#PCDATA)>
<!ELEMENT CHECK_NAME (#PCDATA)>
<!ELEMENT DEAD_HOST_PROCESSING (#PCDATA)>
<!ELEMENT DO_NOT_OVERWRITE_OS (#PCDATA)>
<!ELEMENT TEST_AUTHENTICATION (#PCDATA)>
<!ELEMENT MAX_SCAN_DURATION_PER_ASSET (#PCDATA)>
<!ELEMENT PERFORM_PARTIAL_SSL_TLS_AUDITING (#PCDATA)>
<!ELEMENT MAP (BASIC_INFO_GATHERING_ON?, TCP_PORTS?, UDP_PORTS?, MAP_OPTIONS?, MAP_PERFORMANCE?, MAP_AUTHENTICATION?)>
<!ELEMENT BASIC_INFO_GATHERING_ON (#PCDATA)>
<!ELEMENT MAP_OPTIONS (PERFORM_LIVE_HOST_SWEEP?, DISABLE_DNS_TRAFFIC?)>
<!ELEMENT PERFORM_LIVE_HOST_SWEEP (#PCDATA)>
<!ELEMENT DISABLE_DNS_TRAFFIC (#PCDATA)>
<!ELEMENT MAP_PERFORMANCE (OVERALL_PERFORMANCE?, MAP_PARALLEL?, PACKET_DELAY?)>
<!ELEMENT MAP_PARALLEL (EXTERNAL_SCANNERS?, SCANNER_APPLIANCES?, NETBLOCK_SIZE?)>
<!ELEMENT NETBLOCK_SIZE (#PCDATA)>
<!ELEMENT MAP_AUTHENTICATION (#PCDATA)>
<!ELEMENT ADDITIONAL (HOST_DISCOVERY?, PACKET_OPTIONS?, OS_FINGERPRINTING?)>
<!ELEMENT HOST_DISCOVERY (TCP_PORTS?, UDP_PORTS?, ICMP?)>
<!ELEMENT ICMP (#PCDATA)>
<!ELEMENT PACKET_OPTIONS (IGNORE_FIREWALL_GENERATED_TCP_RST?, IGNORE_ALL_TCP_RST?, IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK?, NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY?)>
<!ELEMENT IGNORE_FIREWALL_GENERATED_TCP_RST (#PCDATA)>
<!ELEMENT IGNORE_ALL_TCP_RST (#PCDATA)>
<!ELEMENT IGNORE_FIREWALL_GENERATED_TCP_SYN_ACK (#PCDATA)>
<!ELEMENT NOT_SEND_TCP_ACK_OR_SYN_ACK_DURING_HOST_DISCOVERY (#PCDATA)>
<!ELEMENT OS_FINGERPRINTING (OS_FINGERPRINTING_ENABLE?, OS_FINGERPRINTING_PORT?, OS_FINGERPRINTING_TIMEOUT?)>
<!ELEMENT OS_FINGERPRINTING_ENABLE (#PCDATA)>
<!ELEMENT OS_FINGERPRINTING_PORT (#PCDATA)>
<!ELEMENT OS_FINGERPRINTING_TIMEOUT (#PCDATA)>
<!ELEMENT INSTANCE_DATA_COLLECTION (INSTANCE_DATA_COLLECTION_ENABLE?, INSTANCE_DATA_COLLECTION_TYPE?, INSTANCE_DATA_COLLECTION_TECHNOLOGY?)>
<!ELEMENT INSTANCE_DATA_COLLECTION_ENABLE (#PCDATA)>
<!ELEMENT INSTANCE_DATA_COLLECTION_TYPE (#PCDATA)>
<!ELEMENT INSTANCE_DATA_COLLECTION_TECHNOLOGY (TECHNOLOGY*)>
<!ELEMENT TECHNOLOGY (#PCDATA)>
<!ELEMENT OS_BASED_INSTANCE_DISC_COLLECTION (OS_BASED_INSTANCE_DISC_COLLECTION_ENABLE?, OS_BASED_INSTANCE_DISC_COLLECTION_TYPE?, OS_BASED_INSTANCE_DISC_COLLECTION_TECHNOLOGY?)>
<!ELEMENT OS_BASED_INSTANCE_DISC_COLLECTION_ENABLE (#PCDATA)>
<!ELEMENT OS_BASED_INSTANCE_DISC_COLLECTION_TYPE (#PCDATA)>
<!ELEMENT OS_BASED_INSTANCE_DISC_COLLECTION_TECHNOLOGY (TECHNOLOGY*)>
ENHANCEMENT
Configure Scan Report Templates with Qualys Patchable and Mitigable Details
What CHANGED for You
You can now configure scan report templates through the API to include Qualys Patchable and Qualys Mitigable vulnerability details.
| New or Updated API | Updated |
| API Endpoint | /api/7.0/fo/report/template/scan/ |
| EOS Timeline: April 2027 | |
| EOL Timeline: October 2027 | |
| API Endpoint (New Version) |
/api/8.0/fo/report/template/scan/ |
| Method | POST, GET |
| DTD or XSD changes | No |
The Scan Report Template API now supports two new optional parameters that enable Qualys Patchable and Qualys Mitigable information in host-based scan report templates. These settings allow you to include additional vulnerability remediation details when generating reports through template-based workflows. These parameters are supported for the create, update, and list actions, so you can save them when creating a new template, updating an existing one, or retrieving your template configuration.
Prerequisite: You must have a Vulnerability Management Reporting Service (VMRS) subscription enabled for your account. Contact your TAM or Qualys Support to enable this feature.
Input ParametersInput Parameters
| Parameter | Required/Optional | Data Type | Description |
|---|---|---|---|
| include_vuln_details_qualys_patchable={1|0} | Optional | Integer | Specify 1 to include Qualys Patchable vulnerability details in the report |
| include_vuln_details_qualys_mitigable={1|0} | Optional | Integer | Specify 1 to include Qualys Mitigable vulnerability details in the report |
Sample - Create Scan Report Template to include Patchable and Mitigable Parameter Sample - Create Scan Report Template to include Patchable and Mitigable Parameter
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?action=create&report_format=xml' \
--header 'X-Requested-With: curl' \
--header 'Content-Type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:49:26Z</DATETIME>
<TEXT>Scan Report Template(s) Successfully Created.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437136</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Update Scan Report Template to include Patchable and Mitigable Parameter Sample - Update Scan Report Template to include Patchable and Mitigable Parameter
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?report_format=xml&template_id=10437135&action=update' \
--header 'X-Requested-With: curl' \
--header 'content-type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:51:34Z</DATETIME>
<TEXT>Scan Report Template Successfully Updated.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437135</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Sample - Export Scan Report Template with Patchable and Mitigable Parameter includedSample - Export Scan Report Template with Patchable and Mitigable Parameter included
API Request
curl --location '<qualys_base_url>/api/8.0/fo/report/template/scan/?action=export&report_format=xml&template_id=10437135' \
--header 'X-Requested-With: curl'
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE REPORTTEMPLATE SYSTEM "<qualys_base_url>/api/8.0/fo/report/template/scan/scanreporttemplate_info.dtd">
<REPORTTEMPLATE>
<SCANTEMPLATE>
<TITLE>
<INFO key="template_id">
<![CDATA[10437135]]>
</INFO>
<INFO key="title">
<![CDATA[all_1]]>
</INFO>
<INFO key="owner">
<![CDATA[221146]]>
</INFO>
</TITLE>
<TARGET>
<INFO key="scan_selection">
<![CDATA[HostBased]]>
</INFO>
<INFO key="include_trending">
<![CDATA[0]]>
</INFO>
<INFO key="asset_groups">
<![CDATA[All]]>
</INFO>
<INFO key="network">
<![CDATA[-100]]>
</INFO>
<INFO key="ips">
<![CDATA[]]>
</INFO>
<INFO key="ipv6">
<![CDATA[]]>
</INFO>
<INFO key="ipv6_network">
<![CDATA[-100]]>
</INFO>
<INFO key="host_with_cloud_agents">
<![CDATA[]]>
</INFO>
<INFO key="fqdns">
<![CDATA[]]>
</INFO>
</TARGET>
<DISPLAY>
<INFO key="graph_business_risk">
<![CDATA[0]]>
</INFO>
<INFO key="graph_vuln_over_time">
<![CDATA[0]]>
</INFO>
<INFO key="display_text_summary">
<![CDATA[1]]>
</INFO>
<INFO key="graph_status">
<![CDATA[0]]>
</INFO>
<INFO key="graph_potential_status">
<![CDATA[0]]>
</INFO>
<INFO key="graph_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_potential_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_ig_severity">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_categories">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_vulns">
<![CDATA[0]]>
</INFO>
<INFO key="graph_os">
<![CDATA[0]]>
</INFO>
<INFO key="graph_services">
<![CDATA[0]]>
</INFO>
<INFO key="graph_top_ports">
<![CDATA[0]]>
</INFO>
<INFO key="display_custom_footer">
<![CDATA[0]]>
</INFO>
<INFO key="display_custom_footer_text">
<![CDATA[]]>
</INFO>
<INFO key="sort_by">
<![CDATA[host]]>
</INFO>
<INFO key="cvss">
<![CDATA[all]]>
</INFO>
<INFO key="host_details">
<![CDATA[0]]>
</INFO>
<INFO key="host_ag_details">
<![CDATA[0]]>
</INFO>
<INFO key="qualys_system_ids">
<![CDATA[0]]>
</INFO>
<INFO key="include_text_summary">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_threat">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_impact">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_solution">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_vpatch">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_compliance">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_exploit">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_malware">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_results">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_appendix">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_account_id">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_reopened">
<![CDATA[0]]>
</INFO>
<INFO key="metadata_ec2_instances">
<![CDATA[0]]>
</INFO>
<INFO key="cloud_provider_metadata">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_detection_logic">
<![CDATA[0]]>
</INFO>
<INFO key="include_trurisk_details">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_detection_source">
<![CDATA[0]]>
</INFO>
<INFO key="trurisk_elimination_status">
<![CDATA[0]]>
</INFO>
<INFO key="mitre_attack_details">
<![CDATA[0]]>
</INFO>
<INFO key="include_vuln_details_deep_scan_results">
<![CDATA[0]]>
</INFO>
<INFO key="display_risk_exception_type">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_qualys_patchable">
<![CDATA[1]]>
</INFO>
<INFO key="include_vuln_details_qualys_mitigable">
<![CDATA[1]]>
</INFO>
</DISPLAY>
<FILTER>
<INFO key="selective_vulns">
<![CDATA[complete]]>
</INFO>
<INFO key="search_list_ids">
<![CDATA[]]>
</INFO>
<INFO key="exclude_qid_option">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_search_list_ids">
<![CDATA[]]>
</INFO>
<INFO key="included_os">
<![CDATA[ALL]]>
</INFO>
<INFO key="status_new">
<![CDATA[1]]>
</INFO>
<INFO key="status_active">
<![CDATA[1]]>
</INFO>
<INFO key="status_reopen">
<![CDATA[1]]>
</INFO>
<INFO key="status_fixed">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_active">
<![CDATA[1]]>
</INFO>
<INFO key="vuln_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="vuln_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="potential_active">
<![CDATA[0]]>
</INFO>
<INFO key="potential_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="potential_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="ig_active">
<![CDATA[0]]>
</INFO>
<INFO key="ig_disabled">
<![CDATA[0]]>
</INFO>
<INFO key="ig_ignored">
<![CDATA[0]]>
</INFO>
<INFO key="display_non_running_kernels">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_non_running_kernel">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_non_running_services">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_superceded_patches">
<![CDATA[0]]>
</INFO>
<INFO key="exclude_qids_not_exploitable_due_to_configuration">
<![CDATA[0]]>
</INFO>
<INFO key="categories_list">
<![CDATA[ALL]]>
</INFO>
<INFO key="qds_score_min">
<![CDATA[]]>
</INFO>
<INFO key="qds_score_max">
<![CDATA[]]>
</INFO>
<INFO key="included_detection_sources">
<![CDATA[ALL]]>
</INFO>
<INFO key="vuln_tag_set_include">
<![CDATA[ATS-2001-UI Changes,ATS-2001-UI Change -2,Create New Tag]]>
</INFO>
<INFO key="vuln_ignored_false_positive">
<![CDATA[1]]>
</INFO>
<INFO key="vuln_ignored_risk_accepted">
<![CDATA[1]]>
</INFO>
<INFO key="threat_ignored_false_positive">
<![CDATA[1]]>
</INFO>
<INFO key="threat_ignored_risk_accepted">
<![CDATA[1]]>
</INFO>
</FILTER>
<SERVICESPORTS>
<INFO key="required_services">
<![CDATA[]]>
</INFO>
<INFO key="unauthorized_services">
<![CDATA[]]>
</INFO>
<INFO key="services_info">
<![CDATA[]]>
</INFO>
<INFO key="required_ports">
<![CDATA[]]>
</INFO>
<INFO key="unauthorized_ports">
<![CDATA[]]>
</INFO>
</SERVICESPORTS>
<USERACCESS>
<INFO key="global">
<![CDATA[0]]>
</INFO>
<INFO key="report_access_users">
<![CDATA[]]>
</INFO>
</USERACCESS>
</SCANTEMPLATE>
</REPORTTEMPLATE>
Sample - Delete Scan Report templateSample - Delete Scan Report template
API Request
curl --location ' /api/8.0/fo/report/template/scan/?action=delete&report_format=xml' \
--header 'X-Requested-With: curl' \
--header 'Content-Type: text/xml' \
API Response
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE SIMPLE_RETURN SYSTEM "<qualys_base_url>/api/8.0/simple_return.dtd">
<SIMPLE_RETURN>
<RESPONSE>
<DATETIME>2026-09-25T04:49:26Z</DATETIME>
<TEXT>Scan Report Template(s) Successfully Deleted.</TEXT>
<ITEM_LIST>
<ITEM>
<KEY>ID</KEY>
<VALUE>10437136</VALUE>
</ITEM>
</ITEM_LIST>
</RESPONSE>
</SIMPLE_RETURN>
Fix
Issues Addressed
The following reported and notable customer issues are fixed in this release:
| Component/Category | Description |
|---|---|
| VM - Asset API | When users added IP addresses to the Excluded Hosts list using the API with a distribution group specified in the dg_names parameter, the API rejected the request as invalid.
This occurred because the request was made by a user who was not the owner of the specified distribution group. |
| VM - Report API | When the sub user was trying to launch a report on Tags, and also added a few AGs/IPs to the template used to launch the report. However, the user did not have access to AGs/IPs added in the template, and an error was observed in the API response.
The issue is fixed, and the report will now be launched on the tags specified in the API call, even if the user does not have access to the AG/IP mentioned in the template. |