Is it possible to use WAS run a mis-configuration setting such as default IIS page has not been removed, Tomcat interface is exposed over internet, etc..?
You may be able to use WAS for this utilizing the Custom Contents feature located in the Search Criteria area within the Option Profile. This allows you to specify strings or regular expressions to search for custom contents within your web application. This may not be ideal, but could provide an option.
There may be a mis-configuration category for some QID? with some provided explicitly by Qualys but it would be at the frontier with a quality ckecker tool, not a security oriented one, no?
Retrieving data ...