Skip to contentGrafana vulnerabilities
Newest
- grafana, grafana enterprise +1 moreEmail Validation Bypass And Preventing Sign Up From Email's OwnerCVE-2023-6152Fix available5.4 Medium
- grafana, grafana worldmap panel, worldmap-panel +2 moreGrafana is an open-source platform for monitoring and observability.
The WorldMap panel plugin,...CVE-2023-30107.3 High
- grafana, grafana enterprise +1 moreGrafana is an open-source platform for monitoring and observability.
In Grafana Enterprise,...CVE-2023-4399Fix available6.6 Medium
- grafana google sheets, google-sheets-datasource +1 moreGoogle Sheets data source plugin for Grafana information disclosure vulnerabilityCVE-2023-4457Fix available5.5 Medium
- grafana, grafana enterprise +1 moreGrafana privilege escalation vulnerabilityCVE-2023-4822Fix available6.7 Medium
- grafana, grafana enterprise +1 moreGrafana vulnerable to Authentication Bypass by SpoofingCVE-2023-3128Public exploitFix available9.4 Critical
- grafana, grafana enterprise +1 moreGrafana has Broken Access Control in Alert manager: Viewer can send test alertsCVE-2023-2183Fix available4.1 Medium
- grafana, grafana enterprise +1 moreGrafana Missing Synchronization vulnerabilityCVE-2023-2801Fix available7.5 High
- grafana, grafana enterprise +1 moreGrafana is an open-source platform for monitoring and observability.
Starting with the 9.1...CVE-2023-1387Fix available4.2 Medium
- grafana, grafana enterprise +1 moreStored XSS in Graphite FunctionDescription tooltipCVE-2023-1410Fix available6.2 Medium
- grafanaStored XSS in Grafana Text pluginCVE-2023-22462Fix available6.4 Medium
- grafana, grafana enterprise +1 moreGrafana vulnerable to Cross-site ScriptingCVE-2023-0594Fix available7.3 High
- grafana, grafana enterprise +1 moreGrafana vulnerable to Cross-site ScriptingCVE-2023-0507Fix availableEPSS 15.5%7.3 High
- grafanaWhen query caching is enabled in Grafana users can query another users sessionCVE-2022-23498Fix available7.1 High
- grafanaGrafana stored XSS in FileUploader componentCVE-2022-23552Fix available7.3 High
- grafanaGrafana vulnerable to spoofing originalUrl of snapshotsCVE-2022-39324Fix available6.7 Medium
- grafana enterprise metricsAccess policy with access to all tenants and using label selectors has more accessCVE-2022-446435.7 Medium
- grafana synthetic-monitoring-agent, synthetic monitoring agent +1 moreGrafana's default installation of `synthetic-monitoring-agent` exposes sensitive informationCVE-2022-46156Fix available7.2 High
- grafanaGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget passwordCVE-2022-39307Fix available6.7 Medium
- grafanaGrafana contains Improper Input ValidationCVE-2022-39306Fix available6.4 Medium
- grafanaGrafana vulnerable to race condition allowing privilege escalationCVE-2022-39328Fix available9.8 Critical
- grafanaGrafana users with email as a username can block other users from signing inCVE-2022-39229Fix available4.3 Medium
- grafanaData source and plugin proxy endpoints could leak the authentication cookie to some destination pluginsCVE-2022-39201Fix available6.8 Medium
- grafanaGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination pluginsCVE-2022-31130Fix available4.9 Medium
- grafana, netapp e-series performance analyzer +1 moreGrafana plugin signature bypass vulnerabilityCVE-2022-31123Fix available6.1 Medium
- grafanaGrafana folders admin only permission privilege escalationCVE-2022-36062Fix available7.6 High
- grafana, fedoraproject fedora +1 moreAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server adminCVE-2022-35957Fix available6.6 Medium
- grafana grafana-image-rendererGrafana Image Renderer leaking filesCVE-2022-31176Fix available8.3 High
- grafana, netapp e-series performance analyzer +1 moreGrafana account takeover via OAuth vulnerabilityCVE-2022-31107Fix available7.1 High
- grafana, netapp e-series performance analyzer +1 moreStored XSS in Grafana's Unified AlertingCVE-2022-31097Fix availableEPSS 70.1%7.3 High
- grafana** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard...CVE-2022-32276Fix availableDisputed7.5 High
- grafanaGrafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor...CVE-2022-32275Fix availableDisputed7.5 High
- grafanaGrafana Enterprise datasource network restrictions bypass via HTTP redirectsCVE-2022-29170Public exploitFix available6.6 Medium
- grafanaThe querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not...CVE-2022-28660Fix available9.8 Critical
- grafanaFGAC API Key privilege escalation in GrafanaCVE-2022-24812Fix available8.0 High
- grafana, redhat ceph storage, storage +2 moreAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...CVE-2022-26148Fix availableEPSS 52.5%9.8 Critical
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreExposure of Sensitive Information in GrafanaCVE-2022-21713Fix available4.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross Site Request Forgery in GrafanaCVE-2022-21703Fix available6.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross site scripting in Grafana proxyCVE-2022-21702Fix available6.5 Medium
- grafana, fedoraproject fedora +1 moreOAuth Identity Token exposure in GrafanaCVE-2022-21673Fix available4.3 Medium
- grafanaGrafana directory traversal for `.cvs` filesCVE-2021-43815Fix available4.3 Medium
- grafanaDirectory Traversal in GrafanaCVE-2021-43813Fix availableEPSS 56.6%4.3 Medium
- grafana agentInstance config inline secret exposureCVE-2021-41090Fix available6.5 Medium
- grafanaGrafana path traversalCVE-2021-43798In KEVPublic exploitFix availableEPSS 88.5%7.5 High
- grafanaCross organization admin control in GrafanaCVE-2021-41244Fix available9.1 Critical
- grafanaXSS vulnerability allowing arbitrary JavaScript executionCVE-2021-41174Fix availableEPSS 85.4%6.9 Medium
- grafana, fedoraproject fedora +1 moreSnapshot authentication bypass in grafanaCVE-2021-39226In KEVFix availableEPSS 99.9%9.8 Critical
- grafana lokiPath traversal in Grafana LokiCVE-2021-36156Fix available5.3 Medium
- grafana enterprise metricsThe Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a...CVE-2021-312315.5 Medium
- grafanaOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...CVE-2021-28148Fix available7.5 High
- Show moreLoading…