Max CVSS | 6.4 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2020-13430 | 4.3 |
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
|
28-02-2023 - 15:15 | 24-05-2020 - 18:15 | |
CVE-2020-13379 | 6.4 |
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can b
|
29-01-2021 - 16:41 | 03-06-2020 - 19:15 | |
CVE-2019-15043 | 5.0 |
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
|
04-10-2020 - 18:15 | 03-09-2019 - 12:15 | |
CVE-2019-3696 | 4.4 |
A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module f
|
24-03-2020 - 14:00 | 03-03-2020 - 11:15 |