CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-11-15
Qlik Sense Enterprise for Windows HTTP Request Tunneling Remote Code Execution Vulnerability (CVE-2023-48365)
[Affected Scope] Qlik Sense Enterprise for Windows (prior to specified patch levels)
[Impact] Unauthenticated remote attackers can elevate privileges and execute arbitrary code on the backend repository server via HTTP request tunneling.
[Mitigation] Immediately apply the official security patches (August 2023 Patch 2 or later, etc.) provided by the vendor.