---
title: "Security digest: January 13, 2025"
url: https://erroneo.us/security/2025-01-13/
description: "January 13, 2025 vulnerability digest: 2 CISA KEV additions (BeyondTrust, Qlik). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-01-13
date_modified: 2025-01-13
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: January 13, 2025

2 known exploited (cisa kev) additions.

## Take stock

- Do you run any of these? BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS), Qlik Sense. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-02-03.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2024-12686](https://erroneo.us/security/cve/CVE-2024-12686/index.md) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS): BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability (CISA due 2025-02-03)
- [CVE-2023-48365](https://erroneo.us/security/cve/CVE-2023-48365/index.md) Qlik Sense: Qlik Sense HTTP Tunneling Vulnerability (CISA due 2025-02-03)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2025-01-13/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt