Records175All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high67CVSS 7.0–8.9
Exploited now
Grafana records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority LOW 30
The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01288 · Published 2019-02-06 · No fix listed CWE-79
Priority LOW 26
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0068 · Published 2020-05-24 · No fix listed CWE-79
Open these records in search →