CVE-2023-41265CISA KEVEPSS p99.8%

CVE-2023-41265Qlik Sense HTTP Tunneling Vulnerability

Qlik / Sense

Description

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Scoring

CVSS 9.6 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
EPSS88.22% probability of exploitation · percentile 99.8% · 2026-09-26T12:00:22Z
Last modified2026-08-05

CISA KEV entry

Added to KEV: 2023-12-07

(incoming)1

TypeTargetConfidenceTier
KEVEntryQlik Sense HTTP Tunneling Vulnerabilitykev-cve-2023-412650%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Qlik Sense Path Traversal Vulnerability
CVE
CVE-2026-23899
CVE
Zabbix Frontend Improper Access Control Vulnerability
CVE
SysAid Server Path Traversal Vulnerability
CVE
Zabbix Frontend Authentication Bypass Vulnerability
CVE
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.