Record summary

CVE-2022-42248 has a selected CVSS score of 5.4 (medium); EIP currently links 1 repository PoC.

Description

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 6, 2025 · Source: CVE List

Proofs of concept

1

Repository PoCs

GitHubOzozuz/Qlik-View-12.60-Including-SR-Stored-Cross-Site-Scripting-CVE-2022-42248Repository PoCby OzozuzStars: 5Not analyzed2 files

3.5 KiB

GitHub

PoC details

References

3