coldbraid

CVE-2023-48365 Qlik Sense

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

CVSS
not scored

CWE-444

On CISA’s exploited list

Qlik Sense HTTP Tunneling Vulnerability

Added
2025-01-13
Federal patch deadline
2025-02-03
Ransomware use
known