CVE-2021-4104 QID

[surbo]

Hello, are we able to get a new QID that will pick up CVE-2021-4104 when using the out of band scanner?

From the example readme file:
Log4j Found: 'D:\Temp\log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )
Log4j Found: 'D:\Temp\log4j-1.2.17.zip!apache-log4j-1.2.17/log4j-1.2.17.jar' ( Manifest Vendor: Apache Software Foundation, Manifest Version: 1.2.17, JNDI Class: NOT Found, Log4j Vendor: log4j, Log4j Version: 1.2.17, CVE Status: Potentially Vulnerable ( CVE-2021-4104: Found ) )

When the out of band scanner runs and the Qualys agent picks up the out of band scan data from the host, CVE-2021-4104 is being listed under QIDs 376193, 376160, 376195 ,376210 which have a different CVE associated with them.

Example:

• 376193 = CVE-2021-45046
• 376160 = CVE-2021-44228
• 376195 = CVE-2021-45105
• 376210 = CVE-2021-44832

Can we get a new QID created specifically for CVE-2021-4104 utilizing the out of band scanner?

Thank you