Qlikview

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-42248 MEDIUM This Month

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Qlikview

NVD GitHub VulDB

CVSS 3.1

5.4

EPSS

0.4%

CVE-2015-3623 MEDIUM POC This Month

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XXE SSRF Qlikview

NVD Exploit-DB

CVSS 2.0

6.4

EPSS

7.4%

CVE-2022-42248

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Qlikview

NVD GitHub VulDB

CVE-2015-3623

EPSS 7% CVSS 6.4

MEDIUM POC This Month

XXE SSRF Qlikview

NVD Exploit-DB