grafana Vulnerability Advisory Catalog

Total 125 security vulnerabilities recorded for grafana software and firmware.

← Back to All Vendors
CVE-2015-9282 MEDIUM
Component: piechart-panel

The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana ...

📅 2019-02-06
CVSS 6.1 Dossier →
Component: grafana

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can resul...

📅 2018-12-20
CVSS 5.4 Dossier →
Component: grafana

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions....

📅 2018-12-13
CVSS 6.5 Dossier →
CVE-2018-15727 CRITICAL
Component: grafana

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie...

📅 2018-08-29
CVSS 9.8 Dossier →
Component: grafana

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links....

📅 2018-06-11
CVSS 6.1 Dossier →
Page 6 of 6 (125 Total Records)