Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Grafana Labs Clear all filters
TI-2025-27466 CVE-2025-41116 · GHSA-rhc9-477g-9p44

Incorrect oauth passthrough in Grafana Databricks Datasource

Priority LOW 11

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in t…

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00287 Published 2025-11-11 Fixed in 1.12.1 CWE-653
TI-2025-03276 CVE-2025-3717 · GHSA-25qx-mh3v-fxhh

Incorrect oauth passthrough in Grafana Snowflake Datasource

Priority LOW 11

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in th…

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00287 Published 2025-11-11 Fixed in 1.14.1 CWE-653
TI-2024-08795 CVE-2024-9476 · GHSA-h493-wm58-vgvj

Privilege escalation vulnerability for Organizations in Grafana

Priority LOW 23

A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration As…

CVSS 4.0MEDIUM 5.1 Local High privileges User interaction EPSS 0.00213 Published 2024-11-13 Fixed in 11.3.0+security-01, 11.2.3+security-01 CWE-266