H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-01-13
Last seen2025-01-13

Confidence

—

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productQlik Sense
Added2025-01-13
Due date2025-02-03
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2023-48365
open
cwe
CWE-444
open