Known vulnerabilities in grafana

Vendor: OpenAnolis
Software: grafana
Software CPE: cpe:2.3:o:openanolis:grafana:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grafana grafana is affected by 34 known vulnerabilities: 4 high, 22 medium, 8 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282		 CWE-367 Low
No
No
 9.2.10-30.0.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 49 more
#VU140599 - Resource exhaustion
CVE-2026-32280		 CWE-400 Medium
No
No
 9.2.10-30.0.1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 65 more
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 9.2.10-30.0.1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 59 more
#VU131638 - Improper Access Control
CVE-2026-33377		 CWE-284 Low
No
No
 9.2.10-32.0.1 18.05.2026 SB2026051824
SB2026081226
SB2026081241
and 2 more
#VU124118 - Improper input validation
CVE-2026-25679		 CWE-20 Medium
No
No
 9.2.10-29.0.1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 130 more
#VU124034 - Resource exhaustion
CVE-2025-61726		 CWE-400 Medium
No
No
 9.2.10-28.0.1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 142 more
#VU124033 - Improper input validation
CVE-2025-61728		 CWE-20 Medium
No
No
 9.2.10-28.0.1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 45 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121		 CWE-295 High
No
No
 9.2.10-28.0.1 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 112 more
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 9.2.10-27.0.1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 9.2.10-26.0.1 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU109656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4123		 CWE-79 Low
Available
No
 9.2.10-23.0.1 22.05.2025 SB2025052230
SB2025052236
SB2025052237
and 7 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 9.2.10-25.0.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU103422 - Resource exhaustion
CVE-2025-21614		 CWE-400 Low
No
No
 9.2.10-21.0.1 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 20 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 9.2.10-21.0.1 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875		 CWE-79 Medium
No
No
 9.2.10-20.0.1 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355		 CWE-457 Medium
No
No
 9.2.10-20.0.1 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 9.2.10-18.0.1 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 9.2.10-17.0.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU87845 - Improper Authorization
CVE-2024-1313		 CWE-285 Medium
No
No
 9.2.10-16.0.1 27.03.2024 SB2024032711
SB2024043089
SB2024050720
and 10 more
#VU87830 - Missing release of memory after effective lifetime
CVE-2024-1394		 CWE-401 Medium
No
No
 9.2.10-16.0.1 26.03.2024 SB2024032646
SB2024032647
SB2024032648
and 54 more


Showing elements 1 - 20 out of 34