Brand
Qlik: actively exploited vulnerabilities
3 vulnerabilities in Qlik products (Sense) are in CISA’s catalog of exploited vulnerabilities. Last added: January 13, 2025.
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Qlik category to your radar, or open its page.
- ERP, business applications and databases 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Sense3 vulnerabilities, Business apps and data
Name used by CISA: Qlik. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Qlik list.
- Rank 1
Qlik SenseCVE-2023-48365
Qlik Sense HTTP Tunneling Vulnerability
RansomwareCVE from 2023, added in 2025
CVSS severity 9.9critical
Added Jan 13, 2025
- Rank 2
Qlik SenseCVE-2023-41265
Qlik Sense HTTP Tunneling Vulnerability
Ransomware
CVSS severity 9.9critical
Added Dec 7, 2023
- Rank 3
Qlik SenseCVE-2023-41266
Qlik Sense Path Traversal Vulnerability
Ransomware
CVSS severity 6.5medium
Added Dec 7, 2023
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.