Read the docs

Grafana

Records175All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high67CVSS 7.0–8.9

Exploited now

Grafana records in CISA KEV
TI-2021-19604 Grafana Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-10-09TI-2021-16611 Grafana Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records
Grafana 104 records CRITICAL Tempo 3 records MEDIUM Agent 2 records LOW Enterprise Metrics 2 records LOW Loki 2 records LOW Piechart-panel 2 records LOW Alloy 1 record LOW Google Sheets 1 record LOW

Records

1 record in Alloy · all components

TI-2024-08334 CVE-2024-8975 · GHSA-chqx-36rm-rf8h

Grafana Alloy on Windows Unquoted service path

Priority LOW 36

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2024-09-25 Fixed in 1.3.3, 1.3.4 +1 CWE-428
Open these records in search →