system-user-grafana vulnerabilities (SUSE)
70 vulnerabilities.
system-user-grafanaSUSESession takeover via Auth Proxy cache key collision7.1 Highsystem-user-grafanaSUSESQL Data Source Plugin: OOM DoS via $__timeGroup macro6.5 Mediumsystem-user-grafanaSUSEBroken access control in dashboard snapshots6.3 Mediumsystem-user-grafanaSUSECVE-2026-17033 CVE Record6.8 Mediumsystem-user-grafanaSUSECVE-2026-17183 CVE Record7.1 Highsystem-user-grafanaSUSEkin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default9.1 Criticalsystem-user-grafanaSUSECVE-2026-21723 Record5.3 Mediumsystem-user-grafanaSUSEInfinite loop on invalid input in golang.org/x/text7.5 Highsystem-user-grafanaSUSEStored XSS in the table panel (TableNG)6.8 Mediumsystem-user-grafanaSUSEPre-authentication denial of service via the OAuth login route5.3 Mediumsystem-user-grafanaSUSEPre-authentication denial of service in the public dashboard query endpoint7.5 Highsystem-user-grafanaSUSEStored XSS in the Geomap panel tile-layer attribution7.3 Highsystem-user-grafanaSUSEOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumsystem-user-grafanaSUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highsystem-user-grafanaSUSEApache Thrift: c_glib dispatch stack overflow5.3 Mediumsystem-user-grafanaSUSEOpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies5.3 Mediumsystem-user-grafanaSUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 Lowsystem-user-grafanaSUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 Mediumsystem-user-grafanaSUSEAlertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint7.5 Highsystem-user-grafanaSUSEGrafana vulnerable to Authentication Bypass by Spoofing9.4 Criticalsystem-user-grafanaSUSEGrafana has Broken Access Control in Alert manager: Viewer can send test alerts4.1 Mediumsystem-user-grafanaSUSEGrafana Missing Synchronization vulnerability7.5 Highsystem-user-grafanaSUSEGrafana is an open-source platform for monitoring and observability. Starting with the 9.1...4.2 Mediumsystem-user-grafanaSUSEStored XSS in Graphite FunctionDescription tooltip6.2 Mediumsystem-user-grafanaSUSEGrafana vulnerable to Cross-site Scripting7.3 Highsystem-user-grafanaSUSEGrafana vulnerable to Cross-site Scripting7.3 Highsystem-user-grafanaSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highsystem-user-grafanaSUSEGrafana stored XSS in FileUploader component7.3 Highsystem-user-grafanaSUSEGrafana vulnerable to spoofing originalUrl of snapshots6.7 Mediumsystem-user-grafanaSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumsystem-user-grafanaSUSEGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Mediumsystem-user-grafanaSUSEGrafana contains Improper Input Validation6.4 Mediumsystem-user-grafanaSUSEGrafana users with email as a username can block other users from signing in4.3 Mediumsystem-user-grafanaSUSEData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Mediumsystem-user-grafanaSUSEGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Mediumsystem-user-grafanaSUSEGrafana plugin signature bypass vulnerability6.1 Mediumsystem-user-grafanaSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highsystem-user-grafanaSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highsystem-user-grafanaSUSEGrafana folders admin only permission privilege escalation7.6 Highsystem-user-grafanaSUSEAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Mediumsystem-user-grafanaSUSEgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highsystem-user-grafanaSUSEGrafana account takeover via OAuth vulnerability7.1 Highsystem-user-grafanaSUSEStored XSS in Grafana's Unified Alerting7.3 Highsystem-user-grafanaSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumsystem-user-grafanaSUSEPrototype Pollution in async7.8 Highsystem-user-grafanaSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highsystem-user-grafanaSUSEUncontrolled Resource Consumption in promhttp7.5 Highsystem-user-grafanaSUSEExposure of Sensitive Information in Grafana4.3 Mediumsystem-user-grafanaSUSECross Site Request Forgery in Grafana6.3 Mediumsystem-user-grafanaSUSECross site scripting in Grafana proxy6.5 Medium- Show olderLoading…