📦

grafana

Vendor: grafana

Login to add this product to WatchStack
Actively Exploited 2 CISA KEV List
PoC / Exploits 10 Code Available
Total RCEs 2 Remote Access
Total CVEs 150 Total Indexed
Avg. EPSS 11.33% Exploit Prob.
Latest CVE CVE-2026-8609 Jul 10

Security Vulnerability Index

Page 11 / 15
5.4 CVSS
CVE-2018-1000816

Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..

EPSS: 0.75%
6.5 CVSS
CVE-2018-19039

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

EPSS: 7.28%
9.8 CVSS
CVE-2018-15727
Exploit Found

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

EPSS: 64.28%
6.1 CVSS
CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.

EPSS: 2.07%