Known vulnerabilities in Grafana 12.2.1+security-01 - page 2

Software: Grafana
Version: 12.2.1+security-01
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 12.2.1+security-01 Grafana 12.2.1+security-01 is affected by 30 vulnerabilities: 8 medium, 22 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124711 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27877
CWE-200 Low
No
No
11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.2 31.03.2026 SB2026033194
SB2026042431
SB2026042902
and 2 more
#VU124710 - Improper input validation
CVE-2026-33375
CWE-20 Low
No
No
11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.2 31.03.2026 SB2026033194
SB2026060464
#VU124709 - Improper Authorization
CVE-2026-21724
CWE-285 Low
No
No
11.6.14, 12.1.10, 12.2.8, 12.3.6 31.03.2026 SB2026033194
SB2026060464
#VU124708 - Improper input validation
CVE-2026-28375
CWE-20 Low
No
No
11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.2 31.03.2026 SB2026033194
SB2026060464
#VU124707 - Resource exhaustion
CVE-2026-27880
CWE-400 Medium
No
No
12.1.10, 12.2.8, 12.3.6, 12.4.2 31.03.2026 SB2026033194
#VU122757 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41117
CWE-79 Low
No
No
12.2.4+security-01, 12.3.2+security-01 12.02.2026 SB2026021238
#VU122756 - Improper Access Control
CVE-2026-21722
CWE-284 Low
No
No
11.6.10+security-01, 12.1.6+security-01, 12.2.4+security-01, 12.3.2+security-01 12.02.2026 SB2026021238
SB20260325198
SB2026040631
and 1 more
#VU122265 - Improper Access Control
CVE-2026-21727
CWE-284 Low
No
No
11.6.11, 12.0.9, 12.1.6, 12.2.4, 12.3.2 03.02.2026 SB2026020361
#VU122160 - Resource Management Errors
CVE-2026-21720
CWE-399 Medium
No
No
11.6.9+security-01, 12.0.8+security-01, 12.1.5+security-01, 12.2.3+security-01, 12.3.1+security-01 30.01.2026 SB2026013061
SB20260325198
SB2026040631
#VU122159 - Improper Privilege Management
CVE-2026-21721
CWE-269 Low
Public exploit available
No
11.6.9+security-01, 12.0.8+security-01, 12.1.5+security-01, 12.2.3+security-01, 12.3.1+security-01 30.01.2026 SB2026013061
SB2026022335
SB2026030249
and 4 more


Showing elements 21 - 40 out of 30