QL
Vendor
Qlik
13
CVEs
3
On KEV
0
New 30D
Products
QS9.9
Qlik Sense
Analytics
7 CVEs3 on KEV0 new
QL7.8
Qlikview
Qlik
3 CVEs0 on KEV0 new
ND7.8
Nprinting Designer
Qlik
1 CVEs0 on KEV0 new
QA6.5
Qlik Analytics
Qlik
1 CVEs0 on KEV0 new
QS6.5
Qlikview Server
Qlik
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-61138 | QS Qlik Sense Qlik | 7.5 | Nov 20 | Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory |
| CVE-2023-48365 RansomwareIn wildKEV | QS Qlik Sense Qlik | 9.9 | Nov 15 | Qlik Sense HTTP Tunneling Vulnerability |
| CVE-2023-41265 RansomwareIn wildKEV | QS Qlik Sense Qlik | 9.9 | Aug 29 | Qlik Sense HTTP Tunneling Vulnerability |
| CVE-2023-41266 RansomwareIn wildKEV | QS Qlik Sense Qlik | 6.5 | Aug 29 | Qlik Sense Path Traversal Vulnerability |
| CVE-2022-42248 | QL Qlikview Qlik | 5.4 | Mar 6 | QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality |
| CVE-2021-41989 | QL Qlikview Qlik | 7.8 | Jan 26 | Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions |
| CVE-2021-41988 | ND Nprinting Designer Qlik | 7.8 | Jan 26 | Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions |
| CVE-2021-36761 | QS Qlik Sense Qlik | 5.3 | Jun 21 | The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF |
| CVE-2022-0564 | QS Qlik Sense Qlik | 5.3 | Feb 21 | A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts |
| CVE-2019-11628 | QS Qlik Sense Qlik | 6.5 | May 1 | An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and Qlik Sense Enterprise and Qlik… |
| CVE-2015-3623 | QL Qlikview Qlik | – | Sep 16 | XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary… |