Qlik Sense critical security fixes

When exploited in combination, the two vulnerabilities can lead to compromise of the server running the Qlik Sense software, including unauthenticated remote code execution (RCE).

Details can be found in the article “Critical Security fixes for Qlik Sense Enterprise for Windows (CVE-2023-41266, CVE-2023-41265)” in the Qlik Community.

Qlik has released five service updates to resolve these issues. All versions of Qlik Sense Enterprise for Windows before and including these versions are affected:

• Mai 2023 Patch 3
• Februar 2023 Patch 7
• November 2022 Patch 10
• August 2022 Patch 12

This issue affects only Qlik Sense Enterprise for Windows. Other Qlik products, including Qlik Cloud, are NOT affected.

If you need assistance with these updates, please do not hesitate to contact us. Our specialist is at your disposal.