H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2023-12-07
Last seen2023-12-07

Confidence

—

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productQlik Sense
Added2023-12-07
Due date2023-12-28
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2023-41265
open
cwe
CWE-444
open