Skip to content
OpenAdvisories

Vendor

Grafana

157 known vulnerabilities.

Products

Grafana OSS 58 Grafana 57 Grafana Enterprise 53 grafana/grafana 4 grafana/grafana-enterprise 4 Tempo 3 Grafana MCP Server 2 Enterprise Traces (GET) 2 Elasticsearch Datasource 2 Loki 2 Alloy 2 grafana-image-renderer 2 mcp-grafana 1 Grafana Operator 1 Grafana Snowflake Datasource Plugin 1 Snowflake Datasource 1 Enterprise Metrics (GEM) 1 Grafana Mimir 1 Grafana OSS and Enterprise 1 (built-in) Google Cloud Monitoring Datasource 1 Prometheus Datasource 1 mcp-k6 1 Clickhouse Datasource 1 Grafana Databricks Datasource Plugin 1 Pyroscope 1 Agent Flow 1 grafana-zabbix-plugin 1 Grafana IRM 1 Grafana Alerting 1 Grafana Correlations 1 grafana-csv-datasource 1 agent 1 Nanogit 1 PostgreSQL Datasource 1 google-sheets-datasource 1 MySQL Datasource 1 Microsoft SQL Server Datasource 1 worldmap-panel 1 grafana-infinity-datasource 1 OnCall 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-43798 Exploited Public exploit Scanner template EPSS 89%

    Grafana path traversal

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

    Grafana Grafana github.com/grafana/grafana grafana Web / CMS Alpine Go
    KEV Oct 9, 2025
  • Critical 9.8
    CVE-2021-39226 Exploited Scanner template EPSS 100%

    Snapshot authentication bypass in grafana

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go
    KEV Aug 25, 2022