Skip to contentGrafana vulnerabilities
Newest
- grafanaThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...CVE-2021-28147Fix available6.5 Medium
- grafanaThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...CVE-2021-28146Fix available6.5 Medium
- grafanaGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...CVE-2021-27962Fix available7.1 High
- grafana, netapp e-series performance analyzer +1 moreDenial of service in GrafanaCVE-2021-27358Fix availableEPSS 83.0%7.5 High
- saml project saml, fedoraproject fedora, grafana +3 more +5 moreXML Processing error in github.com/crewjam/samlCVE-2020-27846Fix available9.8 Critical
- grafanaGrafana XSS via a query alias for the ElasticSearch datasourceCVE-2020-24303Fix available6.1 Medium
- grafanaGrafana Arbitrary File ReadCVE-2019-19499Fix available6.5 Medium
- grafana, netapp e-series performance analyzer +1 moreGrafana stored XSSCVE-2020-11110Public exploitFix available5.4 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 more +4 moreServer Side Request Forgery in GrafanaCVE-2020-13379Public exploitFix availableEPSS 99.9%8.2 High
- grafanaGrafana XSS via adding a link in General featureCVE-2018-18625Fix available6.1 Medium
- grafanaGrafana XSS via a column styleCVE-2018-18624Fix available6.1 Medium
- grafanaGrafana XSS in Dashboard Text PanelCVE-2018-18623Fix available6.1 Medium
- grafana piechart-panellegend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS...CVE-2020-13429Fix available5.4 Medium
- grafanaGrafana XSS via the OpenTSDB datasourceCVE-2020-13430Fix available6.1 Medium
- grafana, fedoraproject fedora, redhat ceph storage +1 more +3 moreGrafana information disclosureCVE-2020-12458Fix available5.5 Medium
- grafana, fedoraproject fedora +1 moreGrafana world readable configuration filesCVE-2020-12459Fix available5.5 Medium
- grafanaGrafana version < 6.7.3 is vulnerable for annotation popup XSS.CVE-2020-12052Fix available6.1 Medium
- grafanaGrafana XSS in header column renameCVE-2020-12245Fix available6.1 Medium
- grafanaAn issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL...CVE-2019-156354.9 Medium
- grafanaIn Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This...CVE-2019-15043Public exploitFix availableEPSS 63.4%7.5 High
- grafanaGrafana Cross-site Scripting vulnerabilityCVE-2019-13068Public exploitFix availableEPSS 51.9%5.4 Medium
- grafana piechart-panelThe Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or...CVE-2015-92826.1 Medium
- grafanaGrafana XSS VulnerabilityCVE-2018-1000816Fix available5.4 Medium
- grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +4 more +6 moreGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...CVE-2018-19039Fix available6.5 Medium
- grafana, redhat ceph storage +1 moreGrafana Authentication BypassCVE-2018-15727Public exploitFix availableEPSS 63.1%9.8 Critical
- grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +2 moreGrafana Cross-site Scripting (XSS)CVE-2018-12099Fix available6.1 Medium