Known vulnerabilities in Grafana 12.4.3+security-02
Vendor:
Grafana Labs
Software:
Grafana
Version:
12.4.3+security-02
Software CPE:
cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Website:
https://github.com/grafana
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
13.2.0
13.1.4
13.0.7
12.4.9
12.3.11
13.1.3
13.0.6
12.4.8
13.1.2
12.4.7
12.3.10
13.0.5
13.1.1
13.0.4
12.4.6
12.3.9
13.1.0
13.0.3
12.4.5
12.3.8
12.2.10
11.6.16
12.4.4
12.3.7
12.2.9
11.6.15
13.0.2
13.0.1+security-01
12.4.3+security-02
12.3.6+security-04
12.2.8+security-04
11.6.14+security-04
13.0.1
13.0.0
12.4.3
12.4.2
12.3.6
12.3.6+security-01
12.2.8
12.2.8+security-01
12.1.10
12.1.10+security-01
11.6.14
11.6.14+security-01
12.3.5
12.2.7
12.1.9
11.6.13
12.4.1
12.4.0
12.3.4
12.2.6
12.1.8
11.6.12
12.3.3
12.2.5
12.1.7
12.0.10
12.3.2+security-01
12.2.4+security-01
12.1.6+security-01
11.6.10+security-01
11.6.11
12.3.1+security-01
12.2.3+security-01
12.2.1+security-01
12.1.5+security-01
12.1.3+security-01
12.0.8+security-01
12.0.6+security-01
11.6.9+security-01
11.3.0+security-01
12.3.2
12.2.4
12.1.6
12.0.9
11.6.10
12.3.1
12.2.3
12.1.5
12.0.8
11.6.9
12.3.0
12.2.2
12.1.4
12.0.7
11.6.8
12.2.1
12.1.3
12.0.6
11.6.7
11.5.10
12.2.0
12.1.2
12.0.5
11.6.6
11.5.9
12.1.1
12.0.4
11.6.5
11.5.8
11.4.8
12.0.3
12.1.0
11.6.4
11.5.7
11.4.7
11.3.9
12.0.1+security-01
11.6.2+security-01
11.5.5+security-01
11.4.5+security-01
11.3.7+security-01
11.2.10+security-01
10.4.19+security-01
11.3.8+security-01
11.4.6+security-01
11.5.6+security-01
11.6.3+security-01
12.0.2+security-01
12.0.2
11.6.3
11.5.6
11.4.6
11.3.8
11.6.0+security-01
11.5.3+security-01
11.4.3+security-01
11.3.5+security-01
11.2.8+security-01
10.4.17+security-01
10.4.19
12.0.1
11.6.2
11.5.5
11.4.5
11.3.7
11.2.10
10.4.18+security-01
11.2.9+security-01
11.3.6+security-01
11.4.4+security-01
11.5.4+security-01
11.6.1+security-01
12.0.0+security-01
12.0.0
11.6.1
11.5.4
11.4.4
11.3.6
11.2.9
10.4.18
11.6.0
11.5.3
11.4.3
11.3.5
11.2.8
11.1.13
10.4.17
11.5.2
11.4.2
11.3.4
11.2.7
11.1.12
10.4.16
11.5.1
11.0.11
11.5.0
11.4.1
11.3.3
11.2.6
11.1.11
11.0.10
10.4.15
11.4.0
11.3.2
11.2.5
11.1.10
11.0.9
10.4.14
11.3.1
11.2.4
11.1.9
11.0.8
10.4.13
10.4.12
11.3.0
11.2.3
11.1.8
11.0.7
10.4.11
10.3.12
11.2.2+security-01
11.1.7+security-01
11.0.6+security-01
11.2.1+security-01
11.1.6+security-01
11.0.5+security-01
11.2.2
11.1.7
11.0.6
10.4.10
10.3.11
11.2.1
11.1.6
11.0.5
10.4.9
10.3.10
11.1.5
11.0.4
10.4.8
11.2.0
10.3.9
11.1.4
11.0.3
10.4.7
11.1.3
11.1.1
9.5.21
11.1.2
11.0.2
10.4.6
10.3.8
10.2.9
10.3.7
10.2.8
9.5.20
10.4.5
11.1.0
11.0.1
10.4.4
10.1.10
9.5.19
10.4.3
10.3.6
10.2.7
11.0.0
10.4.2
10.2.6
10.1.9
10.0.13
9.5.18
10.4.1
10.3.5
10.3.4
10.2.5
10.1.8
10.0.12
10.4.0
9.5.17
10.2.4
10.3.3
10.1.7
10.0.11
9.5.16
10.3.1
10.3.0
10.1.6
10.0.10
9.5.15
10.2.3
10.2.2
1.0.0
9.5.14
10.2.1
10.2.0
10.1.5
10.0.9
9.5.13
9.4.17
10.1.4
10.0.8
9.5.12
10.1.2
10.0.6
9.5.10
9.4.15
10.0.5
9.5.9
9.4.14
10.1.1
10.1.0
10.0.4
9.5.8
10.0.3
9.5.7
10.0.2
9.5.6
10.0.1
9.4.13
9.5.5
10.0.0
9.3.16
9.2.20
8.5.27
9.5.3
9.4.12
9.3.15
9.2.19
8.5.26
9.5.2
9.4.10
9.3.14
9.2.18
8.5.24
9.5.1
9.4.9
9.3.13
9.2.17
9.5.0
9.2.15
8.5.22
9.4.7
9.3.11
9.4.0
9.4.3
9.4.2
9.3.8
9.2.13
8.5.21
9.4.1
8.5.16
9.3.6
9.3.4
8.5.20
9.2.10
9.3.2
9.2.8
9.3.1
9.3.0
9.2.7
9.2.6
9.2.5
9.2.4
8.5.15
9.2.3
9.2.2
9.2.1
9.2.0
9.1.8
8.5.14
9.1.7
7.5.17
9.1.6
9.0.9
8.5.13
9.1.5
9.1.4
9.1.3
9.1.2
9.0.8
8.5.11
8.4.11
8.3.11
9.1.1
9.1.0
9.0.7
8.5.10
9.0.6
9.0.5
9.0.4
9.0.3
8.3.10
8.5.9
8.4.10
9.0.2
9.0.1
8.5.6
9.0.0
8.5.5
8.5.4
7.5.16
8.5.3
8.5.2
8.5.1
8.5.0
8.4.7
8.4.6
8.4.5
8.4.4
8.4.3
8.3.7
8.4.2
8.4.1
8.4.0
8.3.6
8.3.5
7.5.15
8.3.4
7.5.13
8.3.3
8.3.2
7.5.12
8.2.7
8.1.8
8.3.1
8.0.7
8.2.6
8.3.0
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.7
7.5.11
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
7.5.10
8.0.6
8.0.5
8.0.4
7.5.9
8.0.3
7.5.8
8.0.2
8.0.1
8.0.0
7.5.7
7.5.6
7.5.5
7.5.4
7.5.3
7.5.0
7.5.1
7.5.2
6.7.6
7.3.10
7.4.5
7.4.3
7.4.2
7.4.1
7.4.0
7.3.7
6.7.5
7.2.3
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.2
7.2.1
7.2.0
7.1.4
7.1.5
7.1.3
7.1.2
7.1.1
7.1.0
7.0.6
7.0.5
7.0.4
7.0.3
6.7.4
7.0.2
7.0.1
7.0.0
6.7.3
6.7.2
6.7.1
6.7.0
6.6.2
6.6.1
6.6.0
6.5.3
6.5.2
6.5
6.5.1
6.5.0
6.4.5
6.3.7
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.6
6.3.5
2.0.0
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.6
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.2
6.0.1
6.0.0
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.3.4
5.2.5
1.0.3
1.0.2
1.0.1
1.0
5.2.4
5.3.3
5.3.2
5.3.1
5.3.0-beta3
5.3.0-beta2
5.3.0-beta1
5.3.0
4.6.5
5.2.3
5.2.2
5.2.1
5.2.0-beta3
5.2.0-beta2
5.2.0-beta1
5.1.0-beta1
5.0.0-beta5
5.0.0-beta4
5.0.0-beta3
5.0.0-beta2
5.0.0-beta1
4.6.4
4.6.0-beta3
4.6.0-beta2
4.6.0-beta1
4.5.0-beta1
4.3.0-beta1
4.2.0-beta1
4.1.0-beta1
4.0.0-beta2
4.0.0-beta1
3.1.1
3.1.0-beta1
3.1.0
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0-beta7
3.0.0-beta6
3.0-beta5
3.0-beta4
3.0-beta3
3.0-beta2
3.0-beta1
2.6.0-beta1
2.6.0
2.5.0
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0-beta3
2.0.0-beta1
1.9.1
1.9.0-rc1
1.9.0
1.8.1
1.8.0-rc1
1.8.0
1.7.0-rc1
1.7.0
1.6.1
1.6.0
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.4
4.0.0
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.2.0
4.3.0
4.3.1
4.3.2
4.4.0
4.4.1
4.4.2
4.4.3
4.5.0
4.5.1
4.5.2
4.6.0
4.6.1
4.6.2
4.6.3
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.2.0
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145791 - Improper Access Control CVE-2026-19197 |
CWE-284 | Low | 12.4.8, 13.0.6, 13.1.3 | 26.08.2026 |
SB2026082657 |
||
| #VU137392 - Resource exhaustion CVE-2026-8609 |
CWE-400 | Medium | 11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 SB2026081226 |
||
| #VU137391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-8595 |
CWE-79 | Low | 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 |
||
| #VU137390 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-42129 |
CWE-22 | Medium | 11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 |
||
| #VU137389 - Resource exhaustion CVE-2026-42127 |
CWE-400 | Medium | 11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 SB2026081237 SB2026081258 |
||
| #VU137388 - Resource exhaustion CVE-2026-33382 |
CWE-400 | Medium | 11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 SB2026081226 |
||
| #VU137387 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-10601 |
CWE-22 | Medium | 11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 | 13.07.2026 |
SB2026071338 |
||
| #VU137291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-9029 |
CWE-79 | Low | 12.4.4, 13.0.2 | 10.07.2026 |
SB2026071005 |