Read the docs

Qlik

Records11All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Qlik records in CISA KEV
TI-2023-26226 Qlik Sense HTTP Tunneling Vulnerability Priority CRITICAL 100KEV 2025-01-13TI-2023-21870 Qlik Sense HTTP Tunneling Vulnerability Priority CRITICAL 100KEV 2023-12-07TI-2023-21871 Qlik Sense Path Traversal Vulnerability Priority CRITICAL 95KEV 2023-12-07

Components

Products in the NVD configurations · select one to filter the records
Qlik Sense 7 records CRITICAL Qlikview 3 records MEDIUM Nprinting Designer 1 record LOW Qlik Analytics 1 record LOW Qlikview Server 1 record LOW

Records

7 records in Qlik Sense · all components

TI-2023-21870 CVE-2023-41265 · GHSA-h5r5-8fxj-m5cm

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for…

Priority CRITICAL 100KEV

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 1…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.88215 Published 2023-08-29 No fix listed CWE-444
TI-2023-21871 CVE-2023-41266 · GHSA-fxf5-c62c-5f69

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions…

Priority CRITICAL 95KEV

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and ear…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.84843 Published 2023-08-29 No fix listed CWE-22
TI-2019-08701 CVE-2019-11628 · GHSA-5pxw-q4pw-rmwh

An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before…

Priority LOW 38

An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and Qlik Sense Enterprise and Qlik Analytics Platform installations that lack these…

CVSS 3.0HIGH 8.2 Network Low privileges No interaction EPSS 0.00973 Published 2019-05-01 No fix listed CWE-917
TI-2022-00483 CVE-2022-0564 · GHSA-r6j6-xp6q-c876

Qlik Sense Enterprise Domain User enumeration

Priority LOW 27

A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01378 Published 2022-02-21 Fixed in 14.44.0 CWE-204
Open these records in search →