AnsweredAssumed Answered

Qualys API matching for CVE IDs

Question asked by shaheedpak on Apr 6, 2015
Latest reply on May 2, 2015 by Jeff Leggett

Hello Team -

 

Here is a situation, we receive various alerts from various different sources that contain CVE IDs. What I am trying to do is this using qualys API:

 

if CVE ID in (intelligence Source 1) exists in Qualys

 

then

 

Mark the intelligence source ticket to CLOSE status

 

else

 

Mark the intelligence source ticket to OPEN Status  (this would mean that a particular CVE ID does not yet exist in Qualys) could be 0-day etc etc

 

What is the best way to approach this check and how would the call be written?

 

If anyone is doing something similar I would appreicate some input.

 

Many thanks.

Outcomes