XML External Entity Vulnerability in QlikTech Qlikview
CVE-2015-3623

Currently unrated

Key Information:

Vendor: Qlik
Status: Qlikview
Vendor: CVE Published:; 16 September 2015

What is CVE-2015-3623?

An XML External Entity (XXE) vulnerability exists in QlikTech's Qlikview prior to version 11.20 SR12. This flaw allows remote attackers to perform server-side request forgery (SSRF) attacks by crafting malicious XML data sent to AccessPoint.aspx, enabling them to gain unauthorized access to sensitive files within the server environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch