Is Qlik affected by CVE-2025-7783

[qliktime]

Hi,

I see that the post Critical Security fixes for Qlik Sense Enterprise ... - Qlik Community - 2532151 is archived

Is QlikSense on Windows affected by CVE-2025-7783 ?

We already started to schedule patching with customers specifically for this. Is it necessary to patch for security reasons?

[FedericoDellAcqua]

Hello @qliktime (nice name by the way!) 

In which QSEoW version are you working on? 
As far as I can see from web articles: 

🛠️ Affected Versions All versions prior to and including the following are vulnerable:
May 2025 Patch 5
May 2024 Patch 23
November 2023 Patch 17

✅ Fixed Versions To mitigate the vulnerability, upgrade to one of the following patched versions:
May 2025 Patch 6
May 2024 Patch 24
November 2023 Patch 18

In any case I think that for you is better to open a support case to qlik to check this security issue. 

Please feel free to leave a like to this comment if it helps you out! 
Federico

[rzenere_avvale]

Hey @qliktime and @FedericoDellAcqua,
I would hold on on the patching activities. I've seen an email from Qlik to some of our customers that says the vulnerability does not impact Qlik Sense.
I'll leave @Jamie_Gregory and the Qlik team officially answer on this matter.

Riccardo  

[john_oll]

Update: 
German government states that Qlik Sense is explicitly impacted by CVE-2025-7783 
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2165

Affected and fixed versions according to that source are the same as listed by @FedericoDellAcqua .  (If he meant Nov 24 instead of Nov 23 and edits his post 😉 ) 

Please update to 
May 2025 Patch 7
November 2024 Patch 19
May 2024 Patch 25
or above.

[David_Friend · Accepted solution]

@qliktime the article is back up, thanks!

[qliktime · Accepted solution]

Thanks @David_Friend , link to the article https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-and-Vulnerability-CVE-2025-7783-i...