Qlik

11 CVEs across 5 Qlik products. Browse Qlik vulnerabilities, severities, and proof-of-concept exploits.

Qlik products with known CVEs

ProductCVEs
Qlik Sense7
Qlikview3
Nprinting Designer1
Qlik Analytics1
Qlikview Server1
Qlik CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-61138High7.52025-11-20Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
CVE-2023-48365Critical9.62023-11-15Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP hea…
CVE-2023-41266High8.22023-08-29A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, Novembe…
CVE-2023-41265Critical9.62023-08-29An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier…
CVE-2022-42248Medium5.42023-03-06QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.
CVE-2021-41989High7.82023-01-26Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-41988High7.82023-01-26Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.
CVE-2021-36761Medium5.32022-06-21The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.
CVE-2022-0564Medium5.32022-02-21A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerabil…
CVE-2019-11628High8.22019-05-01An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and Qlik Sense Enterpr…
CVE-2015-36232015-09-16XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks an…