Vulnerabilities present in qualys but not showing in Servicenow

ChilankaS
Tera Expert

17 hours ago

Hi All,

I’m facing an issue with the Qualys Host Detection integration in our environment and need some guidance on how to troubleshoot it.

Example For the CI “abc 002”, a vulnerability with (Host Id) Source ID - 105025031 exists in Qualys — this has been confirmed with the Qualys team. The Host List Integration in ServiceNow is bringing the asset that corresponds to this CI.

However, the Host Detection (which runs daily) is not importing the corresponding vulnerability record into ServiceNow. The vulnerability was first detected on March 8th, but it still hasn’t appeared in our instance.

So effectively:

  • Host List → Works (CI is discovered and mapped)
  • Host Detection → Missing vulnerability 
  • In what cases would Host Detection skip records even though it exists in Qualys?

Any troubleshooting steps or insights from similar experiences would be really helpful.

Thanks in advance!

0 Helpfuls
  • 137 Views
1 REPLY 1

Nikan Keyhani
Giga Guru

9 hours ago

Hey Chilanka, 

please check the host that was imported (Discovered Item) and see which CI it was matched to. 

Then verify if any other Qualys hosts have been matched to the same CI. 

If that is the case check if the finding youre searching for is present on that CI and has been added as a detection to the already existing VIT only. 

let me know if this helped or further support is needed, thanks 

0 Helpfuls