Qlik
Security incidents tagged Qlik. Newest first.
0 Qlik incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 647
- Longest quiet run: 647 days (Jan 14–Oct 22)
Show 2 older incidents2 older incidents
January 2025 1
PatchedQlik Sense: Sense HTTP Tunneling Vulnerability
Qlik Sense
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. Added to CISA KEV on 2025-01-13.
Open incident →CVE-2023-48365
December 2023 1
PatchedQlik Sense: 2 exploited vulnerabilities (CVE-2023-41265, CVE-2023-41266)
Qlik Sense
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints. Added to CISA KEV on 2023-12-07. CISA lists known use in ransomware campaigns.
Open incident →CVE-2023-41265 · CVE-2023-41266
