CVE-2023-48365
Qlik Sense HTTP Tunneling Vulnerability
CVSS
—
Sin CVSS
EPSS
24.7%
p98
KEV
SÍ
13 ene 2025
Exploit Today
79
0-100
Publicado: — · Última mod.: —
Producto
Qlik / Sense
Vulnerabilidad
Qlik Sense HTTP Tunneling Vulnerability
Añadido a KEV
13 ene 2025
Remediar antes de
3 feb 2025
Uso conocido en ransomware
Sí
Descripción resumida
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510 ; https://nvd.nist.gov/vuln/detail/CVE-2023-48365