Vulnerabilities > Grafana > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-11-09 CVE-2022-39307 Information Exposure Through an Error Message vulnerability in Grafana
Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana CWE-209
5.3
2022-10-13 CVE-2022-39229 Improper Authentication vulnerability in Grafana
Grafana is an open source data visualization platform for metrics, logs, and traces.
network
low complexity
grafana CWE-287
4.3
2022-09-20 CVE-2022-35957 Authentication Bypass by Spoofing vulnerability in multiple products
Grafana is an open-source platform for monitoring and observability.
network
high complexity
grafana fedoraproject CWE-290
6.6
2022-04-12 CVE-2022-24812 Improper Privilege Management vulnerability in Grafana
Grafana is an open-source platform for monitoring and observability.
network
grafana CWE-269
6.0
2022-02-08 CVE-2022-21713 Authorization Bypass Through User-Controlled Key vulnerability in multiple products
Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana netapp fedoraproject CWE-639
4.3
2022-02-08 CVE-2022-21702 Cross-site Scripting vulnerability in multiple products
Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana netapp fedoraproject CWE-79
5.4
2022-01-18 CVE-2022-21673 Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana fedoraproject
4.3
2021-12-10 CVE-2021-43813 Path Traversal vulnerability in Grafana
Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana CWE-22
4.0
2021-12-08 CVE-2021-41090 Cleartext Storage of Sensitive Information vulnerability in Grafana Agent
Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack.
network
grafana CWE-312
4.3
2021-12-07 CVE-2021-43798 Path Traversal vulnerability in Grafana
Grafana is an open-source platform for monitoring and observability.
network
low complexity
grafana CWE-22
5.0