qlik kayıtları
qlik üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 3 · %23,1
- Silahlaştırılmış
- 3 · %23,1
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 100 gün
Tekrar eden sınıflar
- CWE-668 Exposure of Resource to Wrong Sphere2
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2
- CWE-269 Improper Privilege Management1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
95Hemen | CVE-2023-41265Silahlaştırılmış | An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 qlik · qlik sense · CWE-444 | Kritik9,9 | KEV | %88,2 | 29 Ağu 2023 |
83Hemen | CVE-2023-48365Silahlaştırılmış | Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683.qlik · qlik sense · CWE-444 | Kritik9,9 | KEV | %47,5 | 15 Kas 2023 |
81Hemen | CVE-2023-41266Silahlaştırılmış | A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 aqlik · qlik sense · CWE-22 | Orta6,5 | KEV | %84,8 | 29 Ağu 2023 |
35İzleyin | CVE-2024-36077İstismar yok | Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper validation.CWE-269 | Yüksek8,8 | — | %0,6 | 22 May 2024 |
31İzleyin | CVE-2024-29863Kavram kanıtı | A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may CWE-362 | Yüksek7,8 | — | %0,4 | 5 Nis 2024 |
31İzleyin | CVE-2021-41988İstismar yok | Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.qlik · nprinting designer · CWE-668 | Yüksek7,8 | — | %0,3 | 26 Oca 2023 |
31İzleyin | CVE-2021-41989İstismar yok | Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.qlik · qlikview · CWE-668 | Yüksek7,8 | — | %0,3 | 26 Oca 2023 |
30İzleyin | CVE-2015-3623Kavram kanıtı | XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgerqlik · qlikview | Orta6,4 | — | %15,8 | 16 Eyl 2015 |
30İzleyin | CVE-2025-61138İstismar yok | Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.qlik · qlik sense · CWE-538 | Yüksek7,5 | — | %0,3 | 20 Kas 2025 |
26İzleyin | CVE-2019-11628İstismar yok | An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; andqlik · qlikview server · CWE-917 | Orta6,5 | — | %1,0 | 30 Nis 2019 |
21İzleyin | CVE-2022-0564İstismar yok | Qlik Sense Enterprise Domain User enumerationqlik · qlik sense · CWE-204 | Orta5,3 | — | %1,4 | 21 Şub 2022 |
21İzleyin | CVE-2021-36761İstismar yok | The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.qlik · qlik sense · CWE-918 | Orta5,3 | — | %1,2 | 21 Haz 2022 |
21İzleyin | CVE-2022-42248Kavram kanıtı | QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.qlik · qlikview · CWE-79 | Orta5,4 | — | %0,4 | 6 Mar 2023 |
- CVE-2023-4126595Hemen
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %88qlik · qlik sense29 Ağu 2023
- CVE-2023-4836583Hemen
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683.
KritikCVSS 9,9KEVSilahlaştırılmışEPSS %47qlik · qlik sense15 Kas 2023
- CVE-2023-4126681Hemen
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 a
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %85qlik · qlik sense29 Ağu 2023
- CVE-2024-3607735İzleyin
Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper validation.
YüksekCVSS 8,8İstismar yokEPSS %122 May 2024
- CVE-2024-2986331İzleyin
A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may
YüksekCVSS 7,8Kavram kanıtıEPSS %05 Nis 2024
- CVE-2021-4198831İzleyin
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.
YüksekCVSS 7,8İstismar yokEPSS %0qlik · nprinting designer26 Oca 2023
- CVE-2021-4198931İzleyin
Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.
YüksekCVSS 7,8İstismar yokEPSS %0qlik · qlikview26 Oca 2023
- CVE-2015-362330İzleyin
XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forger
OrtaCVSS 6,4Kavram kanıtıEPSS %16qlik · qlikview16 Eyl 2015
- CVE-2025-6113830İzleyin
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
YüksekCVSS 7,5İstismar yokEPSS %0qlik · qlik sense20 Kas 2025
- CVE-2019-1162826İzleyin
An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and
OrtaCVSS 6,5İstismar yokEPSS %1qlik · qlikview server30 Nis 2019
- CVE-2022-056421İzleyin
Qlik Sense Enterprise Domain User enumeration
OrtaCVSS 5,3İstismar yokEPSS %1qlik · qlik sense21 Şub 2022
- CVE-2021-3676121İzleyin
The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.
OrtaCVSS 5,3İstismar yokEPSS %1qlik · qlik sense21 Haz 2022
- CVE-2022-4224821İzleyin
QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.
OrtaCVSS 5,4Kavram kanıtıEPSS %0qlik · qlikview6 Mar 2023