How many Grafana grafana/grafana-enterprise CVEs are in CISA KEV?

None of Grafana grafana/grafana-enterprise's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Grafana grafana/grafana-enterprise are affected?

23 distinct Grafana grafana/grafana-enterprise versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Grafana grafana/grafana-enterprise CVEs?

Grafana grafana/grafana-enterprise's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of Grafana grafana/grafana-enterprise CVEs?

The average CVSS base score across Grafana grafana/grafana-enterprise's scored CVEs is 6.9.

Grafana grafana/grafana-enterprise Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Grafana grafana/grafana-enterprise vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Grafana grafana/grafana-enterprise Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Grafana grafana/grafana-enterprise has 4 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Grafana grafana/grafana-enterprise, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Grafana grafana/grafana-enterprise's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Grafana grafana/grafana-enterprise's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Grafana grafana/grafana-enterprise CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Grafana grafana/grafana-enterprise version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

12.2.0 <= v < 12.2.4+security-012 CVEs
12.3.0 <= v < 12.3.2+security-012 CVEs
10.2.0 <= v < 11.6.91 CVE
12.0.0 <= v < 12.0.81 CVE
12.0.0 <= v < 12.1.6+security-011 CVE
12.1.0 <= v < 12.1.51 CVE
12.2.0 <= v < 12.2.31 CVE
12.3.0 <= v < 12.3.11 CVE
3.0.0 <= v < 11.6.91 CVE
3.0.0 <= v < 12.0.81 CVE
3.0.0 <= v < 12.1.51 CVE

Common weakness types

The CWE weakness categories most often found in Grafana grafana/grafana-enterprise CVEs. Follow any weakness for its full explanation.

Other Grafana products

Browse vulnerabilities for other products by Grafana.

grafana116 CVEs github.com/grafana/grafana62 CVEs Grafana OSS28 CVEs Grafana Enterprise19 CVEs grafana/grafana4 CVEs github.com/grafana/tempo3 CVEs loki3 CVEs tempo3 CVEs

Frequently asked questions

Common questions about Grafana grafana/grafana-enterprise vulnerabilities.

How many CVEs does Grafana grafana/grafana-enterprise have?: Grafana grafana/grafana-enterprise has 4 published CVE records since 2026.
How many Grafana grafana/grafana-enterprise CVEs are in CISA KEV?: None of Grafana grafana/grafana-enterprise's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Grafana grafana/grafana-enterprise vulnerabilities?: No Grafana grafana/grafana-enterprise CVEs currently have a tracked public exploit in this dataset.
Which versions of Grafana grafana/grafana-enterprise are affected?: 23 distinct Grafana grafana/grafana-enterprise versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Grafana grafana/grafana-enterprise CVEs?: Grafana grafana/grafana-enterprise's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of Grafana grafana/grafana-enterprise CVEs?: The average CVSS base score across Grafana grafana/grafana-enterprise's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Grafana grafana/grafana-enterprise vulnerabilities

Monitor new Grafana grafana/grafana-enterprise vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Grafana grafana/grafana-enterprise Vulnerabilities