.NET DOS vulnarabilities CVE-2023-36042

[dobak]

Hi, our customer is running Qlik Sense Enterprise May 2023 patch 11 and has performance and stability issues of Qlik when running a security/vulnerability scan on the infrastructure.

This is the list of .net related issues found by the scanner: CVE-2023-36042, CVE-2024-21312, CVE-2024-0056, CVE-2024-0057

Would patching to 13 fix this? Which version of .net is in Patch 13 for May 2023?

In general is there a list of .net versions supplied by the Qlik installers?

[Deeksha_JayaSapalya]

Hi @dobak 

The supported .net framework for may 2023 Qlik Sense is 4.8. Please refer the system requirement for additional info.
System requirements for Qlik Sense Enterprise 

However, I could not find the provided CVE reported in our forum so would request you to submit a case along with the report mentioned in the below article
Qlik Security Vulnerability Policy  

I hope this helps!

Best Regards,
Deeksha

[dobak]

according to the answer from support this should be fixed from Nov 2023 + the latest patch.