Qlik vulnerabilities
We track 5 vulnerabilities in Qlik products across 2 products. 4 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on May 22, 2024.
Latest Qlik vulnerabilities
- 8.8 High severity
qlik_sense: Improper Privilege Management
Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper validation. The attacker can elevate their privilege to the internal system role, which allows them to execute commands on the server. This af
- 7.8 High severity
qlikview: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator.
- 9.9 Critical severity
Qlik Sense HTTP Tunneling Exploited
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them
- 6.5 Medium severity
Qlik Sense Path Traversal Exploited
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote at
- 9.9 Critical severity
Qlik Sense HTTP Tunneling Exploited
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker t