Showing 24 results, page 4 of 6
| Published | CVE | Severity (CVSS) | Product | Advisory Title | Updated |
|---|---|---|---|---|---|
| 2025-04-23 | CVE-2025-2703 | Medium (6.8) | Grafana | XSS in XY Chart Plugin in Grafana | — |
| 2025-01-31 | CVE-2024-11741 | Medium (4.3) | Grafana | Information Disclosure in VictorOps Integration in Grafana | — |
| 2024-11-12 | CVE-2024-9476 | Medium (5.1) | Grafana | Privilege Escalation in Organizations in Grafana | — |
| 2024-10-28 | CVE-2024-10452 | Low (2.2) | Grafana | Authorization Bypass in Invitations in Grafana | — |
| 2024-10-17 | CVE-2024-9264 | Critical (9.4) | Grafana | Remote Code Execution in SQL Expressions in Grafana | — |
| 2024-09-26 | CVE-2024-8118 | Medium (5.1) | Grafana | Permission Error in Alerting API in Grafana | — |
| 2024-09-25 | CVE-2024-8996 | High (7.3) | Grafana Agent | Privilege Escalation in Service Path in Grafana Agent | — |
| 2024-09-25 | CVE-2024-8975 | High (7.3) | Grafana Alloy | Privilege Escalation in Service Path in Grafana Alloy | — |
| 2024-09-19 | CVE-2024-8986 | Critical (9.1) | Grafana Plugin SDK | Information Disclosure in Plugin SDK in Grafana | — |
| 2024-07-23 | CVE-2024-6322 | Medium (4.4) | Grafana | Authorization Bypass in Plugin Routes in Grafana | — |
| 2024-05-30 | CVE-2024-5526 | High (7.7) | Grafana OnCall | SSRF in Webhooks in Grafana OnCall | — |
| 2024-03-26 | CVE-2024-1313 | Medium (6.5) | Grafana | Authorization Bypass in Snapshots in Grafana | — |
| 2024-03-07 | CVE-2024-1442 | Medium (6.0) | Grafana | Privilege Escalation in Data Sources in Grafana | — |
| 2024-02-14 | CVE-2023-5123 | High (8.0) | Grafana JSON Plugin | Path Traversal in JSON Plugin in Grafana | 2024-06-18 |
| 2024-02-14 | CVE-2023-5122 | Medium (5.0) | Grafana CSV Plugin | SSRF in CSV Plugin in Grafana | — |
| 2024-02-13 | CVE-2023-6152 | Medium (5.4) | Grafana | Verification Bypass in Email Settings in Grafana | — |
| 2023-10-12 | CVE-2023-4399 | Medium (6.6) | Grafana | Network Restriction Bypass in Data Sources in Grafana | — |
| 2023-10-12 | CVE-2023-4822 | Medium (6.7) | Grafana | Privilege Escalation in Organizations in Grafana | — |
| 2023-09-19 | CVE-2023-4457 | Medium (5.5) | Grafana Google Sheets Plugin | Information Disclosure in Google Sheets Plugin in Grafana | — |
| 2023-06-22 | CVE-2023-3128 | Critical (9.4) | Grafana | Authentication Bypass in Azure AD OAuth in Grafana | — |
| 2023-06-08 | CVE-2023-3010 | High (7.3) | Grafana WorldMap Plugin | XSS in WorldMap Plugin in Grafana | — |
| 2023-06-06 | CVE-2023-2183 | High (7.5) | Grafana | Authorization Bypass in Alerting in Grafana | — |
| 2023-06-06 | CVE-2023-2801 | High (7.5) | Grafana | Race Condition in Data Source Proxy in Grafana | — |
| 2023-04-26 | CVE-2023-1387 | Medium (4.2) | Grafana | Token Leakage in URL Login in Grafana | — |