Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/03/2023 Updated: 13/03/2023

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 0

QlikView 12.60.2 exists to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qlik qlikview

Vulnerability Stored Cross-Site Scripting Affected Products and Versions Qlik View <= 1260 (Including SR) CVEID: CVE-2022-42248 CVSSv31 Score 76 (High) CVSSv31 Attack Vector AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N Short Description In QlikView Ajax Client it was possibile to bypass the limitation on the allowed protocols when creating an interactive object via a special

CWE-79 http://qlikview.com https://github.com/Ozozuz/Qlik-View-Stored-XSS https://nvd.nist.gov https://github.com/Ozozuz/Qlik-View-Stored-XSS

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-42248

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect