CVE-2024-29863

Qlikview contains a local privilege escalation in its MSI installer. The Red Team PoC shows a race condition during MSI repair (msiexec /fa) that causes the installer to load a DLL from C:\Users\AppData\Local\Temp, which an unprivileged user can replace in a narrow window to execute code as NT AU...

PT-2024-5022 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik Qlikview versions prior to May 2022 SR3 12.70.20300 and prior to May 2023 SR2 12.80.20200 Description: A race condition in the installer executable may allow an existing lower privileged user to cause code to be executed in the context o...

The vulnerability of the QvsViewClient client of the QlikView analytics platform allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the QvsViewClient client of the QlikView analytics platform is related to the lack of measures taken to protect the structure of the web page when creating interactive objects. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by...

CVE-2022-42248

QlikView 12.60.2 was discovered to contain a stored cross-site scripting XSS vulnerability in the QvsViewClient functionality...

Cross site scripting

QlikView 12.60.2 was discovered to contain a stored cross-site scripting XSS vulnerability in the QvsViewClient functionality...

CVE-2022-42248

QlikView 12.60.2 was discovered to contain a stored cross-site scripting XSS vulnerability in the QvsViewClient functionality...

CVE-2022-42248

CVE-2022-42248 affects QlikView 12.60.2 in the QvsViewClient component, where a stored XSS vulnerability exists. The issue is described as a stored cross-site scripting flaw in the QvsViewClient functionality, with no explicit exploitation details provided in this dataset. Some connected advisori...

Qlik QlikView 跨站脚本漏洞

Qlik QlikView is Qlik's for rapid development and delivery of interactive guided analytics applications and dashboards. A security vulnerability exists in Qlik QlikView version 12.60.2 that stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2022-42248

QlikView 12.60.2 was discovered to contain a stored cross-site scripting XSS vulnerability in the QvsViewClient functionality...

CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

Qlik QlikView 安全漏洞

Qlik QlikView is Qlik's for rapid development and delivery of interactive guided analytics applications and dashboards. A security vulnerability exists in Qlik QlikView version 12.60.20100.0 and prior versions, which originates from the creation of temporary files in a directory with insecure...

CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-41989

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions...

PT-2023-12393 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik QlikView versions prior to 12.60.20100.0 Description: The issue allows the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions prior to 12.60.20100.0, update to version 12.60.20100.0 or...

CVE-2021-41989

CVE-2021-41989 affects QlikView versions prior to 12.60.20100.0. The issue is described as creating a temporary file in a directory with insecure permissions, exposing local confidentiality, integrity, and availability concerns. The connected sources explicitly identify the vulnerable component a...

PT-2022-6509 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: QlikView version 12.60.2 Description: The issue is related to the QvsViewClient functionality of the QlikView analytical platform, where the structure of web pages is not properly protected when creating interactive objects. This can be...

qlikview.site123.me Cross Site Scripting vulnerability OBB-1478140

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

QlikView 12.50.20000.0 Denial Of Service

Exploit Title: QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2020-08-03 Vendor Homepage: https://www.qlik.com Software Link: https://www.qlik.com/us/trial/qlik-sense-business Tested Version: 12.50.20000.0 Vulnerability Type: Denial...