CVE-2023-41265

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

CISA Known Exploited Vulnerability

Vendor / Product Qlik — Sense

Date Added 2023-12-07

Remediation Due 2023-12-28

Ransomware Use CONFIRMED

https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801; https://nvd.nist.gov/vuln/detail/CVE-2023-41265

Weakness Classification (1)

CWE-444

Affected Software (36)

Vendor	Product	Version
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	august_2022
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	february_2023
qlik	qlik_sense	may_2023
qlik	qlik_sense	may_2023
qlik	qlik_sense	may_2023
qlik	qlik_sense	may_2023
qlik	qlik_sense	november_2022
qlik	qlik_sense	november_2022
qlik	qlik_sense	november_2022
qlik	qlik_sense	november_2022
qlik	qlik_sense	november_2022