CVE security advisories and vulnerability history for Grafana Enterprise by Grafana.
32
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
6.6
Avg CVSS
2023–2026
Last updated
Overview
Grafana Enterprise has 32 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
Severity and exploitation
How the CVSS severity of Grafana Enterprise's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High12
Medium17
Low1
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Grafana Enterprise's CVEs are currently listed in CISA's KEV catalog.
Public exploits
5
5 of Grafana Enterprise's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Grafana Enterprise version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
12.0.01 CVE
12.1.01 CVE
12.2.01 CVE
12.3.01 CVE
Version ranges
12.3.0 <= v <= 12.3.116 CVEs
12.2.0 <= v <= 12.2.114 CVEs
12.4.0 <= v < 12.4.124 CVEs
13.0.0 <= v < 13.0.104 CVEs
13.0.0 <= v < 13.0.114 CVEs
13.1.0 <= v < 13.1.84 CVEs
13.2.0 <= v < 13.2.44 CVEs
Common weakness types
The CWE weakness categories most often found in Grafana Enterprise CVEs. Follow any weakness for its full explanation.
Common questions about Grafana Enterprise vulnerabilities.
How many CVEs does Grafana Grafana Enterprise have?
Grafana Grafana Enterprise has 32 published CVE records since 2023.
How many Grafana Grafana Enterprise CVEs are in CISA KEV?
None of Grafana Grafana Enterprise's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grafana Grafana Enterprise vulnerabilities?
Yes — 5 of Grafana Grafana Enterprise's CVEs have a known public exploit.
Which versions of Grafana Grafana Enterprise are affected?
155 distinct Grafana Grafana Enterprise versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana Grafana Enterprise CVEs?
Grafana Grafana Enterprise's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-284 (Improper Access Control), CWE-290 (Authentication Bypass by Spoofing).
How many critical Grafana Grafana Enterprise vulnerabilities are there?
Grafana Grafana Enterprise has 2 critical and 12 high-severity CVEs.
What is the average severity of Grafana Grafana Enterprise CVEs?
The average CVSS base score across Grafana Grafana Enterprise's scored CVEs is 6.6.
