| CVE-2026-42127 |
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated…
|
7.5
Élevée
|
22 juin 2026 |
| CVE-2026-27876 |
RCE on Grafana via sqlExpressions
|
9.1
Critique
|
27 mars 2026 |
| CVE-2025-41115 |
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage…
|
10.0
Critique
|
21 nov. 2025 |
| CVE-2025-3454 |
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash…
|
5.0
Moyenne
|
2 juin 2025 |
| CVE-2025-2703 |
The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability
|
6.8
Moyenne
|
23 avr. 2025 |
| CVE-2024-6322 |
Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user…
|
4.4
Moyenne
|
20 août 2024 |
| CVE-2023-6152 |
A user changing their email after signing up and verifying it can change it without verification in profile settings
|
5.4
Moyenne
|
13 févr. 2024 |
| CVE-2023-4399 |
Grafana is an open-source platform for monitoring and observability
|
6.6
Moyenne
|
17 oct. 2023 |
| CVE-2023-4822 |
Grafana is an open-source platform for monitoring and observability
|
6.7
Moyenne
|
16 oct. 2023 |
| CVE-2023-3128 |
Grafana is validating Azure AD accounts based on the email claim
|
9.4
Critique
|
22 juin 2023 |
| CVE-2023-2183 |
Grafana is an open-source platform for monitoring and observability
|
4.1
Moyenne
|
6 juin 2023 |
| CVE-2023-2801 |
Grafana is an open-source platform for monitoring and observability
|
7.5
Élevée
|
6 juin 2023 |
| CVE-2023-1387 |
Grafana is an open-source platform for monitoring and observability
|
4.2
Moyenne
|
26 avr. 2023 |
| CVE-2023-1410 |
Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the…
|
6.2
Moyenne
|
23 mars 2023 |
| CVE-2023-0594 |
Grafana is an open-source platform for monitoring and observability
|
7.3
Élevée
|
1 mars 2023 |
| CVE-2023-0507 |
Grafana is an open-source platform for monitoring and observability
|
7.3
Élevée
|
1 mars 2023 |