Qlik Qlik Sense — known CVE vulnerabilities

Every CVE whose affected-product data names Qlik Qlik Sense, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-41265 — CVSS 9.6 (critical) — actively exploited: An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023…
• CVE-2023-48365 — CVSS 9.6 (critical) — actively exploited: Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper…
• CVE-2019-11628 — CVSS 8.2 (high): An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2…
• CVE-2023-41266 — CVSS 8.2 (high) — actively exploited: A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7…
• CVE-2025-61138 — CVSS 7.5 (high): Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
• CVE-2022-0564 — CVSS 5.3 (medium): A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could…
• CVE-2021-36761 — CVSS 5.3 (medium): The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.