Vulnerabilities > Grafana > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-10-29 | CVE-2024-10452 | Authorization Bypass Through User-Controlled Key vulnerability in Grafana 10.4.0 Organization admins can delete pending invites created in an organization they are not part of. | 2.7 |
2023-01-27 | CVE-2022-39324 | Cross-site Scripting vulnerability in Grafana Grafana is an open-source platform for monitoring and observability. | 3.5 |
2022-11-30 | CVE-2022-46156 | Unspecified vulnerability in Grafana Synthetic Monitoring Agent The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. | 3.3 |
2022-09-22 | CVE-2022-36062 | Improper Preservation of Permissions vulnerability in Grafana Grafana is an open-source platform for monitoring and observability. | 3.8 |