Generic CSV Import Fields in Import Detection
Click to view help navigation


Generic CSV Import Fields in Import Detections

The following table lists the fields applicable only for Generic CSV:

Field Name Mandatory or Optional Description String Length (maximum) / Valid Input Values Input Parameter
Host ID Optional It is a universal unique identifier (UUID) Qualys Host ID. The Qualys Host ID is assigned when you scan the host, or a Cloud Agent tracks the host.  255 Number
MAC Address Optional

You can discover an asset's MAC address using the QID of an asset. 

For example, 25-5x-xx-c1-xx-32

24 String
FQDN Optional It is a fully qualified domain name of the host server.  255 String
NetBIOS Optional

NetBIOS is required if you are using old applications or an old version of Windows. The NetBIOS service operates over 139/TCP ports and must be included in the scan options when scanning or tracking by NetBIOS.

For example, instance-vp-ubutnu01-03

 255 String
IP Address Mandatory

Host Assets are the IP addresses in your account. 

For example, xx.164.99.xx

 255 String
Hostname Optional

Hostname distinguishes devices within the local network. 

For example, DESKTOP-IV14sF9.WORKGROUP

 255 String
Operating System Optional Operating System lists the data on which vulnerability has been detected. Some of the operating system vendors that Qualys supports are Microsoft, Red Hat, SUSE, Amazon, and Oracle. To get the complete list of the vendors and the operating systems, see Cloud Agent Platform Availability Matirx (PAM) 255 String
Source Mandatory Source lists the data from the Vulnerability scanning tool.  255 String
Vulnerability External ID Mandatory Vulnerability External ID represents the vulnerability value mentioned by the National Vulnerability Database (NVD) or Vulnerability Tool.  255 String
Vulnerability Title Mandatory

Vulnerability Title represents the vulnerability name.

For example, External Vulnerability Finding 163

 255 String
Vulnerability Description Optional Vulnerability Description is added to the database only when the Vulnerability External ID is unavailable.  512 String

 

Severity

 

Mandatory

 Severity describes the vulnerability severity and is added to the database only when the Vulnerability External ID is unavailable. The field value is skipped if you provide an invalid input value. If you do not enter any value by default, the value is considered 5 - Critical. 
  • 5- Critical 
  • 4- High
  • 3- Medium
  • 2- Low
  • 1- Info
 Number
CVE(s) Optional

CVE(s) are the CVE ID for Vulnerability. 

For example, CVE-2020-1026

 - String
Vulnerability Score Optional

Vulnerability Score is a mandatory field if CVE ID is unavailable. 

 -

Number

CVSSv2 Base Score

CVSSv2 Temporal Score

CVSSv3.1 Base Score

CVSSv3.1 Temporal Score

 Optional CVSS scoring is not enabled by default. The scan reports display CVSS Base and Temporal scores, including vulnerability details.  - Number
CVSS Access Vector (AV) Optional CVSS Access Vector is a base score metric for CVSS v2.  - String
Port Optional

Input the port value from where the vulnerability was detected. 

For example, 8080

 - Number
Protocol Optional

Input the network protocol name.

For example, TCP

 40 String
Vulnerability Finding Optional

Vulnerability Finding field represents the system path of the vulnerability. 

For example, qlua_vm_suse.qlv

 4000 String

 

State

 

Mandatory

State field represents the detection status of the vulnerability. The field value is skipped if you provide an invalid input value. If you do not enter any value by default, the value is considered Open.
  • New
  • Active
  • Fixed, and
  • Reopen
 String

 

Detection Method

 

Optional

 Detection Method represents the type of detection method used for detecting vulnerability. 
  • Authenticated Scan, and
  • Unauthenticated Scan
 String