Grafana

Records175All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high67CVSS 7.0–8.9

Exploited now

Grafana records in CISA KEV

TI-2021-19604 Grafana Path Traversal Vulnerability CRITICAL 90KEV 2025-10-09 TI-2021-16611 Grafana Authentication Bypass Vulnerability CRITICAL 100KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Grafana 104 records CRITICAL Tempo 3 records MEDIUM Agent 2 records LOW Enterprise Metrics 2 records LOW Loki 2 records LOW Piechart-panel 2 records LOW Alloy 1 record LOW Google Sheets 1 record LOW

Records

2 records in Enterprise Metrics · all components

TI-2022-21960 CVE-2022-44643 · GHSA-rp9r-6gmg-rh38

Access policy with access to all tenants and using label selectors has more access

LOW 39

A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00505 Published 2022-12-21 No fix listed CWE-284

TI-2021-11442 CVE-2021-31231 · GHSA-rm28-h995-22q5

The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1…

LOW 25

The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00277 Published 2021-04-30 No fix listed

Open these records in search →

Critical	16
High	67
Medium	86
Low	6
No CVSS	0