| CVE-2026-42127 |
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated…
|
7.5
High
|
Jun 22, 2026 |
| CVE-2026-27876 |
RCE on Grafana via sqlExpressions
|
9.1
Critical
|
Mar 27, 2026 |
| CVE-2025-41115 |
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage…
|
10.0
Critical
|
Nov 21, 2025 |
| CVE-2025-3454 |
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash…
|
5.0
Medium
|
Jun 2, 2025 |
| CVE-2025-2703 |
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability
|
6.8
Medium
|
Apr 23, 2025 |
| CVE-2024-6322 |
Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user…
|
4.4
Medium
|
Aug 20, 2024 |
| CVE-2023-6152 |
A user changing their email after signing up and verifying it can change it without verification in profile settings
|
5.4
Medium
|
Feb 13, 2024 |
| CVE-2023-4399 |
Grafana is an open-source platform for monitoring and observability
|
6.6
Medium
|
Oct 17, 2023 |
| CVE-2023-4822 |
Grafana is an open-source platform for monitoring and observability
|
6.7
Medium
|
Oct 16, 2023 |
| CVE-2023-3128 |
Grafana is validating Azure AD accounts based on the email claim
|
9.4
Critical
|
Jun 22, 2023 |
| CVE-2023-2183 |
Grafana is an open-source platform for monitoring and observability
|
4.1
Medium
|
Jun 6, 2023 |
| CVE-2023-2801 |
Grafana is an open-source platform for monitoring and observability
|
7.5
High
|
Jun 6, 2023 |
| CVE-2023-1387 |
Grafana is an open-source platform for monitoring and observability
|
4.2
Medium
|
Apr 26, 2023 |
| CVE-2023-1410 |
Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the…
|
6.2
Medium
|
Mar 23, 2023 |
| CVE-2023-0594 |
Grafana is an open-source platform for monitoring and observability
|
7.3
High
|
Mar 1, 2023 |
| CVE-2023-0507 |
Grafana is an open-source platform for monitoring and observability
|
7.3
High
|
Mar 1, 2023 |