Skip to main content

Security Audit / Pentest - JavaScript libraries have known vulnerabilities

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Mario_Petre
Support
Support

Security Audit / Pentest - JavaScript libraries have known vulnerabilities

Last Update:

Dec 16, 2020 6:36:51 AM

Updated By:

Sonja_Bauernfeind

Created date:

Sep 26, 2017 9:16:23 AM

The term "known vulnerabilities" refers to errors in standard software components and systems that result from incorrect programming. Most known vulnerabilities have a characteristic footprint that enables their reliable identification. Known vulnerabilities allow attackers to work deliberately, because the vulnerabilities are often known precisely and, in many cases, prefabricated exploits are also
available.

Please upgrade your software to the latest version and evaluate the vulnerability again. If it is still present, please report it to Qlik Support for further feedback from our Software Security Office.

Due to the development lifecycle, we can sometimes end up in a situation where an external library is patched faster than we can pull it into our products. When such a vulnerability is discovered, the precise versions of said libraries must be specified and escalated to Support for further investigation. 

If the last version of the product is not being used, however, the first recommended step is to update the software to its latest version and determine if the vulnerabilities still exist.

Labels (1)
Contributors
Version history
Last update:
‎2020-12-16 06:36 AM
Updated by: