CISA's list that day

7 December 2023

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Qlik Sense. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2023-41265HTTP TunnelingQlik SensePatch this weekRansomware use; EPSS 0.880.88
CVE-2023-41266Path TraversalQlik SensePatch this weekRansomware use; EPSS 0.850.85

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.