topic Re: CVE-2022-42248 - QlikView versions affected ? in QlikView

CVE-2022-42248 - QlikView versions affected ?

josephfallon — Mon, 26 Jan 2026 18:19:17 GMT

CVE-2022-42248 raised against Qlikview versions "<= 12.60.2" was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.

Details below

https://www.tenable.com/cve/CVE-2022-42248

Does anyone know what lower versions of QlikView are also affected please ?

Re: CVE-2022-42248 - QlikView versions affected ?

Chip_Matejowsky — Wed, 23 Aug 2023 12:04:50 GMT

Hi @josephfallon,

This vulnerability was investigated by Qlik R&D under defect ID QV-23876. It was first identified in version April 2021 (12.60.20000) and fixed in version May 2022 SR2 (12.70.20200).

Suggest that you run only May 2022 SR2 and later versions if you are concerned about this defect.

Best Regards