Qlik
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 16, 2015 to present
21
Total CVEs
12
Critical+High
4
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
36/100
low
⚠️ 4 Active Exploits⚡ 3 Zero-Days🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
2High
10Medium
6Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Code Injection
2
2
XSS
2
3
SSRF
2
4
Race Condition
1
5
Path Traversal
1
Most Affected Products
1. Qlik Qlik Sense Windows164
2. Qlik QlikView Server32
3. Qlik Qlik Sense16
4. Qlik Qlik Analytics9
5. Qlik Qlikview4
Recent Vulnerabilities
See more →CVE-2026-9057
CVSS 8.2EPSS 0%high
Security fix for Qlik Talend Administration Center URL access control vulnerability
5/20/2026🔧 No Patch
CVE-2026-9056
CVSS 5.4EPSS 0%medium
Security fix for Qlik Talend Administration Center cross-site scripting vulnerability
5/20/2026🔧 No Patch
CVE-2020-36994
CVSS 4.6medium
QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service
1/29/2026🔧 No Patch
CVE-2025-61138
CVSS 7.5high
11/20/2025🔧 No Patch
https://www.theregister.com/2025/01/20/harry_potter_publisher_breach/
unknown
Datacus extractus: Harry Potter publisher breached without resorting to magic
1/20/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2024-55579
CVSS 8.8high
12/9/2024🔧 No Patch
CVE-2024-55580
CVSS 7.5high
12/9/2024🔧 No Patch
CVE-2024-36077
CVSS 8.8high
5/22/2024🔧 No Patch
CVE-2024-29863
CVSS 7.8EPSS 0%high
4/5/2024🔧 No Patch
https://www.bleepingcomputer.com/news/security/magnet-goblin-hackers-use-1-day-flaws-to-drop-custom-linux-malware/
unknown
Magnet Goblin hackers use 1-day flaws to drop custom Linux malware
3/9/2024🔧 No Patch
Monitor Qlik in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.