Read the docs

Grafana Labs

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Grafana Labs records in CISA KEV

No Grafana Labs vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-08795 CVE-2024-9476 · GHSA-h493-wm58-vgvj

Privilege escalation vulnerability for Organizations in Grafana

Priority LOW 23

A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration As…

CVSS 4.0MEDIUM 5.1 Local High privileges User interaction EPSS 0.00213 Published 2024-11-13 Fixed in 11.3.0+security-01, 11.2.3+security-01 CWE-266
TI-2025-27466 CVE-2025-41116 · GHSA-rhc9-477g-9p44

Incorrect oauth passthrough in Grafana Databricks Datasource

Priority LOW 11

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in t…

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00287 Published 2025-11-11 Fixed in 1.12.1 CWE-653
TI-2025-03276 CVE-2025-3717 · GHSA-25qx-mh3v-fxhh

Incorrect oauth passthrough in Grafana Snowflake Datasource

Priority LOW 11

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in th…

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00287 Published 2025-11-11 Fixed in 1.14.1 CWE-653
Open these records in search →