192 matches found
Qlik Sense Input Validation Error Vulnerability
Qlik Sense is an application from Qlik USA. Allows users to create visualizations, charts, interactive dashboards and analytical applications for local and offline use. A security vulnerability exists in Qlik Sense Enterprise for Windows. An attacker could exploit the vulnerability to access file...
Qlik Sense environmental issues vulnerabilities
Qlik Sense is an application from Qlik USA. Allows users to create visualizations, charts, interactive dashboards and analytical applications for local and offline use. A security vulnerability exists in Qlik Sense Enterprise for Windows. An attacker can exploit the vulnerability to elevate...
CVE-2023-41266
CVE-2023-41266 is a path traversal vulnerability in Qlik Sense Enterprise for Windows that allows an unauthenticated attacker to establish an anonymous session by sending crafted HTTP requests to unauthorized endpoints. Affected versions include May 2023 Patch 3 and earlier, February 2023 Patch 7...
CVE-2023-41265
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...
CVE-2023-41266
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...
CVE-2023-41266
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...
CVE-2023-41265: Inconsistent Interpretation of HTTP Requests
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...
CVE-2023-41266: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...
CVE-2023-41265
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...
PT-2023-5319
Name of the Vulnerable Software and Affected Versions Qlik Sense Enterprise for Windows versions May 2023 Patch 3 and earlier Qlik Sense Enterprise for Windows versions February 2023 Patch 7 and earlier Qlik Sense Enterprise for Windows versions November 2022 Patch 10 and earlier Qlik Sense...
CVE-2023-41265
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...
PT-2023-5320
Name of the Vulnerable Software and Affected Versions Qlik Sense Enterprise for Windows versions May 2023 Patch 3 and earlier Qlik Sense Enterprise for Windows versions February 2023 Patch 7 and earlier Qlik Sense Enterprise for Windows versions November 2022 Patch 10 and earlier Qlik Sense...
CVE-2023-41266
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...
CVE-2023-41265
CVE-2023-41265 affects Qlik Sense Enterprise for Windows. The issue is an HTTP Request Smuggling vulnerability caused by tunneling HTTP requests in the raw HTTP traffic, enabling a remote attacker to escalate privileges by crafting requests that execute on the backend repository server. Affected ...
CVE-2021-41988
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-41988
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...
PT-2023-12393 · Qlik · Qlikview
Name of the Vulnerable Software and Affected Versions: Qlik QlikView versions prior to 12.60.20100.0 Description: The issue allows the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions prior to 12.60.20100.0, update to version 12.60.20100.0 or...
PT-2023-12392 · Qlik · Qlik Nprinting Designer
Name of the Vulnerable Software and Affected Versions: Qlik NPrinting Designer versions prior to 21.14.4.0 Description: The issue arises from Qlik NPrinting Designer creating a temporary file in a directory with insecure permissions. This could potentially allow unauthorized access or modificatio...
CVE-2021-41988
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-41989
CVE-2021-41989 affects QlikView versions prior to 12.60.20100.0. The issue is described as creating a temporary file in a directory with insecure permissions, exposing local confidentiality, integrity, and availability concerns. The connected sources explicitly identify the vulnerable component a...