topic Re: HeartBleed Open SSL Vulnerability in QlikView

HeartBleed Open SSL Vulnerability

Mon, 26 Jan 2026 18:19:17 GMT

Is QlikView (specifically 11.2) vulnerable to the SSL HeartBleed OpsnSSL bug? http://heartbleed.com/.

Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Wed, 09 Apr 2014 17:38:52 GMT

Hi Scott,

We do not use OpenSSL in our code. OpenSSL is geared more toward Apache.

Bill

Re: Re: HeartBleed Open SSL Vulnerability

Thu, 10 Apr 2014 22:32:37 GMT

I understand that it is not in QlikView according to the third party license terms, but is in Expressor and therefore potentially in the Governance Dashboard?

QlikView 3rd party license terms - http://www.qlik.com/~/media/files/info/license-terms-third-party/third-party-license-terms.ashx

Re: Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Thu, 10 Apr 2014 23:54:57 GMT

Hi,

OpenSSL is used for SSL and web traffic. Expressor is an application and not a webserver. Also, Qlik uses Microsoft products that unless you are running Windows version of Apache are not affected according to Microsoft.

Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Fri, 11 Apr 2014 12:15:44 GMT

Hi,

I have been told the Expressor team is looking at their product to make sure I am correct.

Bill

Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Fri, 11 Apr 2014 16:30:39 GMT

Hi,

Here is the information from the Expressor team.

Expressor has used two versions of OpenSSL is its history. Until 2011, we were using 0.8.9d and then upgraded to 1.0.0d. Neither of these versions is affected by heartbleed.

Bill

Re: HeartBleed Open SSL Vulnerability

Tue, 22 Apr 2014 18:00:47 GMT

Can anyone provide any links on QlikView site or a link to something that says QlikView is "safe" from heartbleed? I need to provide documentation that shows it is - some kind of reference. I have been unable to find anything other than this thread.

Thank you,

Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Tue, 22 Apr 2014 22:08:11 GMT

Hi Richard,

I am a DSE with QlikView and was the one that went to our security team to get the information. I will see if I can't get someone to put a official statement on the Qlik Site.

Bill

Re: HeartBleed Open SSL Vulnerability

Wed, 23 Apr 2014 12:20:01 GMT

Thank you Bill that would be very helpful.

Re: HeartBleed Open SSL Vulnerability

Bill_Britt — Thu, 08 May 2014 02:10:52 GMT

Hi Richard,

Check this out.

http://community.qlik.com/blogs/supportupdates/2014/05/07/qlikview-is-not-vulnerable-to-heartbleed-openssl-issue

Bill

Re: HeartBleed Open SSL Vulnerability

Thu, 08 May 2014 12:12:49 GMT

That is great Bill thank you very much.