Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 167

Export CSV
CVE-2018-18625

grafana: XSS vulnerability via a link on the "Dashboard > All Panels > General" screen

Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Grafana
Products
Grafana
CVE-2018-18624

grafana: XSS vulnerability via a column style on the "Dashboard > Table Panel" screen

Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Grafana Redhat
Products
Grafana Enterprise Linux Openshift
CVE-2018-18623

grafana: XSS vulnerability via the "Dashboard > Text Panel" screen

Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVSS 3.1 · 6.1 Medium EPSS 1.8% KEV · Not listed
Vendors
Grafana Redhat
Products
Grafana Ceph Storage
CVE-2018-15727

grafana: authentication bypass knowing only a username of an LDAP or OAuth user

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

CVSS 3.0 · 9.8 Critical EPSS 63.1% KEV · Not listed
Vendors
Grafana Redhat
Products
Grafana Ceph Storage Storage
CVE-2018-1000816

grafana: Cross site scripting in Influxdb and Graphite query editor

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Grafana
Products
Grafana
CVE-2024-10452

grafana: Org admin can delete pending invites in different org

Organization admins can delete pending invites created in an organization they are not part of.

CVSS 3.1 · 2.2 Low EPSS < 1% KEV · Not listed
Vendors
Grafana
Products
Grafana