CVE security advisories and vulnerability history for Grafana Enterprise by Grafana.
19
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
6.8
Avg CVSS
2023–2026
Last updated
Overview
Grafana Enterprise has 19 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Grafana Enterprise, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Grafana Enterprise's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High8
Medium8
Low1
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Grafana Enterprise's CVEs are currently listed in CISA's KEV catalog.
Public exploits
5
5 of Grafana Enterprise's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Grafana Enterprise version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
11.2.0 <= v < 11.2.8+security-012 CVEs
11.3.0 <= v < 11.3.5+security-012 CVEs
11.4.0 <= v < 11.4.3+security-012 CVEs
11.5.0 <= v < 11.5.3+security-012 CVEs
11.6.0 <= v < 11.6.0+security-012 CVEs
9.0.0 <= v < 9.2.132 CVEs
9.3.0 <= v < 9.3.82 CVEs
9.4.0 <= v < 9.4.122 CVEs
9.5.0 <= v < 9.5.32 CVEs
10.0.0 <= v < 10.0.111 CVE
10.0.0 <= v < 10.0.7
Common weakness types
The CWE weakness categories most often found in Grafana Enterprise CVEs. Follow any weakness for its full explanation.
Common questions about Grafana Enterprise vulnerabilities.
How many CVEs does Grafana Grafana Enterprise have?
Grafana Grafana Enterprise has 19 published CVE records since 2023.
How many Grafana Grafana Enterprise CVEs are in CISA KEV?
None of Grafana Grafana Enterprise's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grafana Grafana Enterprise vulnerabilities?
Yes — 5 of Grafana Grafana Enterprise's CVEs have a known public exploit.
Which versions of Grafana Grafana Enterprise are affected?
130 distinct Grafana Grafana Enterprise versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana Grafana Enterprise CVEs?
Grafana Grafana Enterprise's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control), CWE-266 (Incorrect Privilege Assignment).
How many critical Grafana Grafana Enterprise vulnerabilities are there?
Grafana Grafana Enterprise has 2 critical and 8 high-severity CVEs.
What is the average severity of Grafana Grafana Enterprise CVEs?
The average CVSS base score across Grafana Grafana Enterprise's scored CVEs is 6.8.
