Skip to content
OpenAdvisories

Vendor

Grafana

157 known vulnerabilities.

Products

Grafana OSS 58 Grafana 57 Grafana Enterprise 53 grafana/grafana 4 grafana/grafana-enterprise 4 Tempo 3 Grafana MCP Server 2 Enterprise Traces (GET) 2 Elasticsearch Datasource 2 Loki 2 Alloy 2 grafana-image-renderer 2 mcp-grafana 1 Grafana Operator 1 Grafana Snowflake Datasource Plugin 1 Snowflake Datasource 1 Enterprise Metrics (GEM) 1 Grafana Mimir 1 Grafana OSS and Enterprise 1 (built-in) Google Cloud Monitoring Datasource 1 Prometheus Datasource 1 mcp-k6 1 Clickhouse Datasource 1 Grafana Databricks Datasource Plugin 1 Pyroscope 1 Agent Flow 1 grafana-zabbix-plugin 1 Grafana IRM 1 Grafana Alerting 1 Grafana Correlations 1 grafana-csv-datasource 1 agent 1 Nanogit 1 PostgreSQL Datasource 1 google-sheets-datasource 1 MySQL Datasource 1 Microsoft SQL Server Datasource 1 worldmap-panel 1 grafana-infinity-datasource 1 OnCall 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2024-8118 Public exploit

    Grafana alerting wrong permission on datasource rule write endpoint

    In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules.

    Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine
  • Medium 6.6
    CVE-2022-29170 Public exploit

    Grafana Enterprise datasource network restrictions bypass via HTTP redirects

    Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…

    Grafana Grafana grafana Web / CMS Alpine