Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

"Open URL" and "Launch" disabled for document sheet buttons in latest QlikView Plugin releases

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Sonja_Bauernfeind
Digital Support
Digital Support

"Open URL" and "Launch" disabled for document sheet buttons in latest QlikView Plugin releases

Last Update:

Sep 24, 2020 7:14:42 AM

Updated By:

Sonja_Bauernfeind

Created date:

Aug 13, 2020 5:50:35 AM

A document sheet can have buttons, which in turn can have associated Actions. 

These Actions can be of several types, but there are two in particular which have been disabled in the Internet Explorer Plugin due to security concerns:

  • Launch
  • Open URL

buttons.png

 

See QV-20715: Remote Code Execution RCE. QvPlugin IE for QCS 

To benefit from the security fixes the Internet Explorer plugin need to be updated.

After an update, the disabled features can be re-enabled (not recommended). 

Environment:

QlikView April 2020 12.50 SR1
QlikView April 2019 12.40 SR4
QlikView November 2018 12.30 SR5
QlikView November 2017 12.20 SR11
QlikView 11.20 SR21

 

Resolution

Labels (1)
Comments
diegoberriel
Contributor II
Contributor II

Hi @Sonja_Bauernfeind,

Is there no way to get this enabled from server side avoiding change the setting for every single user? We have more than 2000 Qv users and several reports have link between reports and internal services pages.

Thanks

Regards,

Diego

Sonja_Bauernfeind
Digital Support
Digital Support

Hello @diegoberriel 

Not currently, no. I would suggest logging an Idea on this in our Ideas forum: https://community.qlik.com/t5/Ideas/idb-p/qlik-ideas

This will ensure that our developers know how this feature is requested. If you let me know after you posted it, I can give it a vote! 

dapostolopoylos
Creator III
Creator III

This is bad news...

qvd1rkqv
Creator
Creator

Because we are using the IE Plugin on Edge in IE Mode,  Is this still a security vulnerability on MS Edge in IE Mode? 

Sonja_Bauernfeind
Digital Support
Digital Support

@qvd1rkqv This fix was introduced for the QlikView Plugin, independent in what version (or IE Mode in Edge) it is being run.

Contributors
Version history
Last update:
‎2020-09-24 07:14 AM
Updated by: