CVE

CVE-2023-41265

P1⬤ KNOWN RANSOMWARE USE

Qlik Sense HTTP Tunneling Vulnerability

Qlik · Sense

Date added (CISA)

2023-12-07

Remediation due

2023-12-28

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Source: NVD ↗ · CISA KEV Catalog ↗