I am developing an automated solution to get the result of a web application scan in excel vba. On click of a button the request will go to Qualys with the URL as argument and fetch the current scan result for that particular URL and display it in a cell with a color like Red for High, Yellow for MED etc. On checking the XML report downloaded I do not see such a single value of severity that I can show. However I see it when I login to Qualys manually and go to Scans -> Scan List -> Quick Links -> View Report. It shows a single severity near the graphs below download button. Please help me understand how is this severity decided. Is it like if there is at least one High then show High, if there is no high then check Med and if at least one medium then MED? Or there is some other criteria.