Qlik
Vulnerability activity for Qlik: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.6CriticalNov 15, 2023Qlik SenseCVE-2023-48365Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.Added to KEV Jan 13, 2025 · 425 days after publicationExploited48% likelyDetection
- 9.6CriticalAug 29, 2023Qlik SenseCVE-2023-41265Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.Added to KEV Dec 7, 2023 · 100 days after publicationExploited88% likelyExploit codeNucleiDetection
- 8.2HighAug 29, 2023Qlik Sense Path traversal / file handlingCVE-2023-41266Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.Added to KEV Dec 7, 2023 · 100 days after publicationExploited85% likelyExploit codeNucleiDetection
Recent
- 7.5HighNov 20, 2025qlik sense Information disclosureCVE-2025-61138Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
- 9.6CriticalNov 15, 2023Qlik SenseCVE-2023-48365Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.Exploited48% likelyDetection
- 8.2HighAug 29, 2023Qlik Sense Path traversal / file handlingCVE-2023-41266Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.Exploited85% likelyExploit codeNucleiDetection
- 9.6CriticalAug 29, 2023Qlik SenseCVE-2023-41265Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.Exploited88% likelyExploit codeNucleiDetection
Top products
- qlik sense1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.