CVE-2023-48365

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510 ; https://nvd.nist.gov/vuln/detail/CVE-2023-48365

Remediation deadline: February 3, 2025

Ransomware use: Known

Description

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Timeline

Published:January 13th, 2025 12:00 AM

Last modified:January 13th, 2025 12:00 AM

Added to KEV:January 13th, 2025

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Qlik

Products

Sense

Weaknesses (CWE)

CWE-444

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute