CVE Watch—

CVE-2023-48365

Qlik Sense HTTP Tunneling Vulnerability

CVSS

—

No CVSS

EPSS

24.7%

p98

KEV

YES

Jan 13, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

24.7%EPSS · 30 days24.7%

2026-08-022026-08-31

KEV catalog record

Product

Qlik / Sense

Vulnerability

Qlik Sense HTTP Tunneling Vulnerability

Added to KEV

Jan 13, 2025

Remediate by

Feb 3, 2025

Known ransomware use

Yes

Summary description

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510 ; https://nvd.nist.gov/vuln/detail/CVE-2023-48365

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-412668.2 HIG

99.7%

KEV—80Qlik Sense Path Traversal Vulnerability27d CVE-2023-412659.6 CRI

99.8%

KEV—80Qlik Sense HTTP Tunneling Vulnerability27d