Qlik vendor intelligence

Qlik Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Qlik products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse Qlik KEVs Full KEV feed

Total KEVs: 3; Known exploited vulnerabilities affecting Qlik products
In CISA KEV: 3; Records also listed in the official catalog
Beyond CISA KEV: 0; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; Qlik KEVs with sensor-observed exploitation activity

The catalog gap matters for Qlik exposure

All three exploited Qlik CVEs tracked here are also listed in CISA KEV. Use product ownership and sensor evidence to prioritize within this portfolio.

100%
Covered by CISA: 0%
Beyond CISA: 2
Product families

Attested Qlik CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2023-41265 An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7...	Qlik Sense Enterprise for Windows	Confirmed	In CISA	07 Dec 2023
CVE-2023-41266 A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and...	Qlik Sense Enterprise for Windows	Confirmed	In CISA	07 Dec 2023
CVE-2023-48365 Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation...	Sense Enterprise for Windows	Confirmed	In CISA	13 Jan 2025

Showing 3 of 3 Qlik known exploited vulnerabilities.

Recurring weakness patterns

Inconsistent interpretation and limitation account for three mapped occurrences across this Qlik KEV portfolio.

Browse all KEVs →

CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.