# Qualys (Web App Scanner) PlexTrac supports importing XML files from **Qualys**. The Qualys web parser is a component of the Qualys WAS solution responsible for crawling the web application, collecting data, and identifying potential vulnerabilities. The web parser can be customized to scan specific web applications and detect vulnerabilities in various web applications, including static and dynamic web applications. {% hint style="info" %} When importing a file from Qualys, whether for the VM parser or Web parser, select "Qualys" from the import pulldown menu, and PlexTrac will decide which mapping to use based on the fields provided in the import file.\ \ ![](/files/49n5d8kdeGyvFObuoFmF) {% endhint %} Below are the mappings of fields and any reference notes to provide context. If a field is not listed, PlexTrac does not currently import it.
## Finding Field Mappings
PlexTrac FieldQualys PathNotes
title<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><TITLE>
severity<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><SEVERITY>We are passed a number, which gets evaluated as following: "0": "Informational", "1": "Informational", "2": "Low", "3": "Medium", "4": "High", "5": "Critical",
referencesAny data surrounded by <![CDATA[some stuff]]> tag is removed before storing the data. All the data from the tags are stored into a list that is saved as reference links.
recommendations<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><SOLUTION>
description

Any data surrounded by <![CDATA[some stuff]]> tag is removed before storing the data. Data is combined.

evidence
risk_score
tags<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><SEVERITY>If severity is 1, then we give it a tag of "minimal".
common_identifiers
field: ["scores"]["cvss"]
labelHardcoded "CVSS Base Score"
value<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><CVSS_SCORE><CVSS_BASE>
field: ["cvss_temporal"]
labelHardcoded "CVSS Temporal Score"
value<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><CVSS_SCORE><CVSS_TEMPORAL>
field: ["scores"]["cvss3"]
labelHardcoded "CVSSv3 Base Score"
value<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><CVSS3_SCORE><CVSS3_BASE>
field: ["cvss3_temporal"]
labelHardcoded "CVSSv3 Temporal Score"
value<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><CVSS3_SCORE><CVSS3_TEMPORAL>
field: ["scores"]["pci_flag"]
labelHardcoded "PCI_FLAG"
value<WAS_SCAN_REPORT><GLOSSARY><QID_LIST><QID><PCI_FLAG>
field: ["cwe"]
labelHardcoded "CWE"
value<GLOSSARY><QID_LIST><QID><CWE>
field: ["wasc"]
labelHardcoded "WASC"
value<GLOSSARY><QID_LIST><QID><WASC>
field: ["category"]
labelHardcoded "Category"
value<GLOSSARY><QID_LIST><QID><CATEGORY>
field: ["owasp"]
labelHardcoded "OWASP"
value<GLOSSARY><QID_LIST><QID><OWASP>
## Asset Field Mappings | PlexTrac Field | Qualys Path | Notes | | -------------- | -------------------------------------------------------------------------- | ------------------------------------------------------- | | asset | \\\\\ | There is some logic here for parent/child relationship. | --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.plextrac.com/plextrac-documentation/product-documentation-1/integrations-and-file-imports/qualys-web-app-scanner.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.