Known vulnerabilities in Grafana Enterprise
Vendor:
Grafana Labs
Software:
Grafana Enterprise
Software CPE:
cpe:2.3:a:grafana_labs:grafana_enterprise:*:*:*:*:*:*:*:*
Website:
https://github.com/grafana
Total vulnerabilities:
8
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
12.4.13
13.0.11
13.1.8
13.2.4
12.4.12
13.0.10
13.1.7
13.2.3
13.0.9
13.1.6
13.2.2
12.4.11
13.2.1
13.1.5
13.0.8
12.4.10
13.2.0
13.1.4
13.0.7
12.4.9
12.3.11
13.1.3
13.0.6
12.4.8
13.1.2
12.4.7
12.3.10
13.0.5
13.1.1
13.0.4
12.4.6
12.3.9
13.1.0
13.0.3
12.4.5
12.3.8
12.2.10
11.6.16
12.4.4
12.3.7
12.2.9
11.6.15
13.0.2
13.0.1
12.4.3
13.0.0
12.4.2
12.3.6
12.2.8
12.1.10
11.6.14
12.4.1
12.3.5
12.2.7
12.1.9
11.6.13
12.4.0
12.3.4
12.2.6
12.1.8
11.6.12
12.3.3
12.2.5
12.1.7
12.0.10
11.6.11
12.3.2
12.2.4
12.1.6
12.0.9
11.6.10
12.3.1
12.2.3
12.1.5
12.0.8
11.6.9
12.3.0
12.2.2
12.2.1
12.2.0
12.1.4
12.1.3
12.1.2
12.1.1
12.1.0
12.0.7
12.0.6
12.0.5
12.0.4
12.0.3
12.0.2
12.0.1
12.0.0
11.6.8
11.6.7
11.6.6
11.6.5
11.6.4
11.6.3
11.6.2
11.6.1
11.6.0
11.5.10
11.5.9
11.5.8
11.5.7
11.5.6
11.5.5
11.5.4
11.5.3
11.5.2
11.5.1
11.5.0
11.4.8
11.4.7
11.4.6
11.4.5
11.4.4
11.4.3
11.4.2
11.4.1
11.4.0
11.3.9
11.3.8
11.3.7
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3.0
11.2.10
11.2.9
11.2.8
11.2.7
11.2.6
11.2.5
11.2.4
11.2.3
11.2.2
11.2.1
11.2.0
11.1.13
11.1.12
11.1.11
11.1.10
11.1.9
11.1.8
11.1.7
11.1.6
11.1.5
11.1.4
11.1.3
11.1.2
11.1.1
11.1.0
11.0.11
11.0.10
11.0.9
11.0.8
11.0.7
11.0.6
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
10.4.19
10.4.18
10.4.17
10.4.16
10.4.15
10.4.14
10.4.13
10.4.12
10.4.11
10.4.10
10.4.9
10.4.8
10.4.7
10.4.6
10.4.5
10.4.4
10.4.3
10.4.2
10.4.1
10.4.0
10.3.12
10.3.11
10.3.10
10.3.9
10.3.8
10.3.7
10.3.6
10.3.5
10.3.4
10.3.3
10.3.1
10.3.0
10.2.9
10.2.8
10.2.7
10.2.6
10.2.5
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.10
10.1.9
10.1.8
10.1.7
10.1.6
10.1.5
10.1.4
10.1.2
10.1.1
10.1.0
10.0.13
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.5.21
9.5.20
9.5.19
9.5.18
9.5.17
9.5.16
9.5.15
9.5.14
9.5.13
9.5.12
9.5.10
9.5.9
9.5.8
9.5.7
9.5.6
9.5.5
9.5.3
9.5.2
9.5.1
9.5.0
9.4.17
9.4.15
9.4.14
9.4.13
9.4.12
9.4.10
9.4.9
9.4.7
9.4.3
9.4.2
9.4.1
9.4.0
9.3.16
9.3.15
9.3.14
9.3.13
9.3.11
9.3.8
9.3.6
9.3.4
9.3.2
9.3.1
9.3.0
9.2.20
9.2.19
9.2.18
9.2.17
9.2.15
9.2.13
9.2.10
9.2.8
9.2.7
9.2.6
9.2.5
9.2.4
9.2.3
9.2.2
9.2.1
9.2.0
9.1.8
9.1.7
9.1.6
9.1.5
9.1.4
9.1.3
9.1.2
9.1.1
9.1.0
9.0.9
9.0.8
9.0.7
9.0.6
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.5.27
8.5.26
8.5.24
8.5.22
8.5.21
8.5.20
8.5.16
8.5.15
8.5.14
8.5.13
8.5.11
8.5.10
8.5.9
8.5.6
8.5.5
8.5.4
8.5.3
8.5.2
8.5.1
8.5.0
8.4.11
8.4.10
8.4.7
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.4.0
8.3.11
8.3.10
8.3.7
8.3.6
8.3.5
8.3.4
8.3.3
8.3.2
8.3.1
8.3.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.5.17
7.5.16
7.5.15
7.5.13
7.5.12
7.5.11
7.5.10
7.5.9
7.5.8
7.5.7
7.5.6
7.5.5
7.5.4
7.5.3
7.5.2
7.5.1
7.5.0
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.3.10
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.3
7.2.2
7.2.1
7.2.0
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.7.6
6.7.5
6.7.4
6.7.3
6.7.2
6.7.1
6.7.0
6.6.2
6.6.1
6.6.0
6.5.3
6.5.2
6.5.1
6.5.0
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.6
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.2
6.0.1
6.0.0
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.6.5
4.6.4
4.6.3
4.6.2
4.6.1
4.6.0
4.5.2
4.5.1
4.5.0
4.4.3
4.4.2
4.4.1
4.4.0
4.3.2
4.3.1
4.3.0
4.2.0
4.1.2
4.1.1
4.1.0
4.0.2
4.0.1
4.0.0
3.1.1
3.1.0
3.0.4
3.0.3
3.0.2
3.0.1
2.6.0
2.5.0
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
1.9.1
1.9.0
1.8.1
1.8.0
1.7.0
1.6.1
1.6.0
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.0.4
1.0.3
1.0.2
1.4.0
1.3.1
1.3.0
1.2.1
1.2.0
1.1.0
1.0.1
1.0.0
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU152982 - Missing Authorization CVE-2026-81841 |
CWE-862 | Medium | 12.4.12, 13.0.10, 13.1.7, 13.2.3 | 30.09.2026 |
SB2026093090 |
||
| #VU152981 - Missing Authorization CVE-2026-81842 |
CWE-862 | Low | 12.4.12, 13.0.10 | 30.09.2026 |
SB2026093090 |
||
| #VU152980 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-15815 |
CWE-59 | High | 12.4.11, 13.0.9, 13.1.6, 13.2.2 | 30.09.2026 |
SB2026093089 SB2026101594 |
||
| #VU149952 - Incorrect Authorization CVE-2026-17183 |
CWE-863 | Low | 12.3.11, 12.4.9, 13.0.7, 13.1.4, 13.2.0 | 15.09.2026 |
SB2026091531 |
||
| #VU146960 - Authentication Bypass by Capture-replay CVE-2026-12704 |
CWE-294 | Medium | 12.4.11, 13.0.8, 13.1.5, 13.2.1 | 04.09.2026 |
SB2026090453 |
||
| #VU146959 - Improper Authentication CVE-2026-14199 |
CWE-287 | Low | 12.4.10, 13.0.8, 13.1.5, 13.2.1 | 04.09.2026 |
SB2026090453 |
||
| #VU118797 - Incorrect Privilege Assignment CVE-2025-41115 |
CWE-266 | Medium | 12.0.6, 12.1.3, 12.2.1, 12.3.0 | 27.11.2025 |
SB2025112702 |
||
| #VU64391 - Missing Authentication for Critical Function CVE-2022-28660 |
CWE-306 | High | 1.4.0 | 15.06.2022 |
SB2022061619 SB2024022823 |