Vulnerability

[leszekman]

 our qlik servers (qc and prod) have :

Microsoft Office Security Update for March 2023

HKLM\SOFTWARE\Microsoft\Office\16.0\Common\ProductVersion LastProduct = 16.0.4266.1001
KB5002351 is not installed
C:\Program Files\Microsoft Office\Office16\\excel.exe Version is 16.0.5378.1000
KB5002197 is not installed
C:\Program Files\Microsoft Office\Office16\\graph.exe Version is 16.0.5305.1000

Microsoft Visual C++ 2010 Redistributable Package Detected

%ProgramFiles%\Common Files\Microsoft Shared\VC\msdia100.dll file version is 10.0.40219.1
%ProgramFiles(x86)%\Common Files\Microsoft Shared\VC\msdia100.dll file version is 10.0.40219.1#

The above items are showing up on vulnerability reports, so at this point I like to find out if they are used by Qlick

and if it’s safe remove (uninstall) from the server without causing any issue for Qlik.

Please advise

[Michael_Tarallo]

Hello Leszekman - thanks for this, I am forwarding this to the appropriate PMs - I or someone else will report back

[Michael_Tarallo]

I just got word back from the team they said that you need to open up a support ticket or contact Qlik support. Are you familiar with this process?