Known vulnerabilities in grafana - page 2

Vendor: OpenAnolis
Software: grafana
Software CPE: cpe:2.3:o:openanolis:grafana:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grafana grafana is affected by 34 known vulnerabilities: 4 high, 22 medium, 8 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 9.2.10-17.0.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788		 CWE-835 Medium
No
No
 9.2.10-17.0.1 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 7.5.15-5.0.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.5.15-5.0.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU77652 - Improper Authentication
CVE-2023-3128		 CWE-287 High
No
No
 9.2.10-7.0.1 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more
#VU72132 - Improper Authentication
CVE-2022-39229		 CWE-287 Low
No
No
 7.5.15-4.0.2 12.02.2023 SB2023021201
SB2023021202
SB2023021203
and 13 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 7.5.15-4.0.2 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 7.5.15-4.0.2 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU67396 - Improper input validation
CVE-2022-27664		 CWE-20 Medium
No
No
 7.5.15-4.0.2 15.09.2022 SB2022091520
SB2022091521
SB2022092144
and 127 more
#VU65353 - Improper Authentication
CVE-2022-31107		 CWE-287 High
No
No
 7.5.11-3.0.1 15.07.2022 SB2022071510
SB2022072642
SB2022072643
and 21 more
#VU64406 - Resource exhaustion
CVE-2021-27358		 CWE-400 Medium
Available
No
 7.5.9-5.0.1 15.06.2022 SB2021081235
SB2021111029
SB2022022701
#VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43813		 CWE-22 Low
No
No
 7.5.11-2.0.1 14.06.2022 SB2022061422
SB2022062026
SB2022081215
and 16 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 7.5.9-5.0.1 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Available
Exploited
 6.3.6-3.0.1 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more


Showing elements 21 - 40 out of 34