/api/2.0/fo/knowledge_base/qvs/?action=list
[GET] [POST]
Download Qualys Vulnerability Score (QVS) information from the Vulnerability KnowledgeBase for one or more CVE IDs based on certain criteria. The API output is in JSON format.
Parameter |
Description |
action=list |
(Required) You must specify the list action. |
details={Basic|All} |
(Required) Specify details=Basic to show the base QVS in the output. Specify details=All to show the base QVS and contributing factors in the output. |
cve={value} |
(Required) Filter the JSON output to only show vulnerabilities associated with the CVE IDs that you specify. |
qvs_last_modified _before={date} |
(Optional) Show only CVE IDs with a QVS score that was last modified before a certain date and time. Valid date format is: YYYY-MMDD[THH:MM:SSZ] format (UTC/GMT), like “2021-12-01” or “2021-1201T23:12:00Z”. |
qvs_last_modified _after={date} |
(Optional) Show only CVE IDs with a QVS score that was last modified after a certain date and time. Valid date format is: YYYY-MM-DD[THH:MM:SSZ] format (UTC/GMT), like “2021-12-01” or “2021-12-01T23:12:00Z”. |
qvs_min={value} |
(Optional) Show only CVEs with a QVS value greater than or equal to the QVS min value specified. (QVS Prime will not be considered.) When qvs_min and qvs_max are specified in the same request, the qvs_min value must be less than the qvs_max value. |
qvs_max={value} |
(Optional) Show only CVEs with a QVS value less than or equal to the QVS max value specified. (QVS Prime will not be considered.) When qvs_min and qvs_max are specified in the same request, the qvs_min value must be less than the qvs_max value. |
nvd_published_be fore={date} |
(Optional) Show only CVE IDs with a QVS score that was published before a certain date and time. Valid date format is: YYYY-MM-DD[THH:MM:SSZ] format (UTC/GMT), like “2021-12-01” or “2021-12-01T23:12:00Z”. |
nvd_published_aft er={date} |
(Optional) Show only CVE IDs with a QVS score that was published after a certain date and time. Valid date format is: YYYY-MM-DD[THH:MM:SSZ] format (UTC/GMT), like “2021-12-01” or “2021-12-01T23:12:00Z”. |
API request
curl -u "USERNAME:PASSWORD" -H "X-Requested-With:curl"
"https://qualysapi.qualys.com/api/2.0/fo/knowledge_base/qvs/?action=list&cve=CVE-2021-36765,CVE-2021-36798&qvs_min=1&qvs_max=100&qvs_last_modified_after=2016-12-16T05:00:17Z&qvs_last_modified_before=2022-01-20T05:00:17Z&nvd_published_after=2016-12-16T05:00:17Z&nvd_published_before=2022-12-16T05:00:17Z&details=All"
JSON output
{
"CVE-2021-36765": {
"base": {
"id": "CVE-2021-36765",
"idType": "CVE",
"qvs": "28",
"qvsLastChangedDate": 1642032000,
"nvdPublishedDate": 1628086500
},
"contributingFactors": {
"cvss": "5",
"cvssVersion": "v2"
}
},
"CVE-2021-36798": {
"base": {
"id": "CVE-2021-36798",
"idType": "CVE",
"qvs": "78",
"qvsLastChangedDate": 1642550400,
"nvdPublishedDate": 1628514900
},
"contributingFactors": {
"cvss": "5",
"cvssVersion": "v2",
"exploitMaturity": [
"poc"
]
}
}
}