Known vulnerabilities in grafana - page 4
Vendor:
SUSE
Software:
grafana
Software CPE:
cpe:2.3:o:suse:grafana:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
111
Public exploits:
10
Known exploited (KEV):
2
Breakdown by Severity Chart
12.4.5-150200.3.91.1
12.4.5-160002.1.1
12.4.5-150000.1.98.1
12.4.5-150002.4.24.1
11.6.14+security04-160002.1.1
11.6.14+security04-150002.4.21.1
11.6.14+security01-150200.3.88.1
11.6.14+security01-150000.1.95.2
11.6.14+security01-150002.4.14.1
11.6.14+security01-160002.1.1
11.6.11-159000.2.3.2
11.6.11-150200.3.83.1
11.6.11-150000.1.90.1
11.5.10-150002.4.9.1
11.5.10-120002.4.9.1
11.5.10-150200.3.80.1
11.5.10-1.87.1
11.5.10-150002.4.6.1
11.5.10-120002.4.6.1
11.5.7-150002.4.3.3
11.5.7-120002.4.3.2
11.5.5-150200.3.72.2
11.5.5-150000.1.79.1
11.5.5-1.79.2
10.4.15-150200.3.67.1
10.4.15-150200.3.69.1
10.4.15-1.75.1
10.4.15-150000.1.75.1
10.4.15-150000.1.71.1
10.4.15-150200.3.64.1
10.4.15-1.71.1
10.4.13-150200.3.59.1
10.4.13-150000.1.66.1
10.4.13-1.66.2
9.5.18-4.30.4
9.5.18-159000.4.33.4
9.5.18-150200.3.56.1
9.5.18-150000.1.63.2
9.5.18-1.63.1
9.5.16-159000.4.30.2
9.5.16-4.27.1
9.5.8-1.60.1
9.5.8-150000.1.60.2
9.5.8-4.21.2
9.5.8-159000.4.24.1
9.5.5-1.54.3
9.5.5-150000.1.54.3
9.5.5-150200.3.47.1
9.5.5-150000.1.51.1
9.5.5-1.51.1
9.5.5-150200.3.44.1
9.5.1-150200.3.41.3
9.5.1-150000.1.48.5
9.5.1-1.48.1
8.5.22-1.45.1
8.5.22-150000.1.45.1
8.5.22-150200.3.38.1
8.5.20-1.42.1
8.5.20-150000.1.42.1
8.5.20-150200.3.35.1
8.3.5-150000.1.30.1
7.5.12-159000.4.18.3
7.5.12-4.18.1
7.5.12-1.27.1
8.5.15-150200.3.32.1
8.5.15-150000.1.39.1
8.5.15-1.39.1
8.3.10-150000.1.33.1
8.3.10-1.33.2
8.3.10-150200.3.26.1
8.5.13-150100.3.12.1
7.5.12-150100.3.9.1
6.7.4-3.29.1
6.7.4-4.23.1
8.3.5-1.30.3
7.5.7-4.15.3
7.5.7-4.15.1
7.5.7-1.21.2
7.5.7-1.21.1
6.7.4-1.24.2
7.3.1-3.6.1
Vulnerabilities (111)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72132 - Improper Authentication CVE-2022-39229 |
CWE-287 | Low | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 12.02.2023 |
SB2023021201 SB2023021202 SB2023021203 and 13 more |
||
| #VU72131 - Exposure of sensitive information to an unauthorized actor CVE-2022-39201 |
CWE-200 | Medium | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 12.02.2023 |
SB2023021201 SB2023021202 SB2023021203 and 12 more |
||
| #VU72130 - Exposure of sensitive information to an unauthorized actor CVE-2022-31130 |
CWE-200 | Medium | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 12.02.2023 |
SB2023021201 SB2023021202 SB2023021203 and 11 more |
||
| #VU72128 - Improper Verification of Cryptographic Signature CVE-2022-31123 |
CWE-347 | Medium | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 11.02.2023 |
SB2023021201 SB2023021202 SB2023021203 and 15 more |
||
| #VU71567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-23552 |
CWE-79 | Low | 8.5.20-1.42.1, 8.5.20-150000.1.42.1, 8.5.20-150200.3.35.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 26.01.2023 |
SB2023012632 SB2023032032 SB2023032033 and 10 more |
||
| #VU69484 - Improper input validation CVE-2022-39306 |
CWE-20 | Medium | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 22.11.2022 |
SB2022112220 SB2023021202 SB2023021203 and 12 more |
||
| #VU68897 - Resource exhaustion CVE-2022-32149 |
CWE-400 | Medium | 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 01.11.2022 |
SB2022110139 SB2022110140 SB2022110142 and 68 more |
||
| #VU68557 - Authentication Bypass Using an Alternate Path or Channel CVE-2022-35957 |
CWE-288 | Low | 8.5.13-150100.3.12.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 20.10.2022 |
SB2022092614 SB2022102094 SB2023050969 and 16 more |
||
| #VU67646 - Permissions, Privileges, and Access Controls CVE-2022-36062 |
CWE-264 | Medium | 8.5.13-150100.3.12.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 26.09.2022 |
SB2022092614 SB2022102094 SB2023062230 and 10 more |
||
| #VU67396 - Improper input validation CVE-2022-27664 |
CWE-20 | Medium | 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 15.09.2022 |
SB2022091520 SB2022091521 SB2022092144 and 127 more |
||
| #VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31097 |
CWE-79 | Low | 8.3.10-1.33.2, 8.3.10-150000.1.33.1, 8.3.10-150200.3.26.1, 8.5.13-150100.3.12.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 15.07.2022 |
SB2022071510 SB2022102094 SB2022102641 and 16 more |
||
| #VU65353 - Improper Authentication CVE-2022-31107 |
CWE-287 | High | 8.3.10-1.33.2, 8.3.10-150000.1.33.1, 8.3.10-150200.3.26.1, 8.5.13-150100.3.12.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 15.07.2022 |
SB2022071510 SB2022072642 SB2022072643 and 21 more |
||
| #VU64402 - Exposure of sensitive information to an unauthorized actor CVE-2022-21673 |
CWE-200 | Low | 8.3.5-1.30.3, 8.3.5-150000.1.30.1, 8.5.13-150100.3.12.1, 9.5.8-4.21.2 | 15.06.2022 |
SB2022061623 SB2022062026 SB2022081215 and 12 more |
||
| #VU64399 - Cross-Site Request Forgery (CSRF) CVE-2022-21703 |
CWE-352 | Medium | 8.3.5-1.30.3, 8.3.5-150000.1.30.1, 8.3.10-150200.3.26.1, 8.5.13-150100.3.12.1, 9.5.8-4.21.2 | 15.06.2022 |
SB2022061621 SB2022062026 SB2022102094 and 14 more |
||
| #VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21702 |
CWE-79 | Low | 8.3.5-1.30.3, 8.3.5-150000.1.30.1, 8.3.10-150200.3.26.1, 8.5.13-150100.3.12.1, 9.5.8-4.21.2 | 15.06.2022 |
SB2022061621 SB2022062026 SB2022102094 and 14 more |
||
| #VU64394 - Authorization Bypass Through User-Controlled Key CVE-2022-21713 |
CWE-639 | Low | 8.3.5-1.30.3, 8.3.5-150000.1.30.1, 8.3.10-150200.3.26.1, 8.5.13-150100.3.12.1, 9.5.8-4.21.2 | 15.06.2022 |
SB2022061621 SB2022062026 SB2022102094 and 13 more |
||
| #VU64273 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43813 |
CWE-22 | Low | 7.5.12-1.27.1, 7.5.12-4.18.1, 7.5.12-150100.3.9.1, 7.5.12-159000.4.18.3, 8.3.5-1.30.3, 8.3.5-150000.1.30.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 14.06.2022 |
SB2022061422 SB2022062026 SB2022081215 and 17 more |
||
| #VU63461 - Improper input validation CVE-2022-29170 |
CWE-20 | Low | 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 19.05.2022 |
SB2022051916 SB2024012352 SB2024012403 and 3 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 9.5.1-1.48.1, 9.5.8-4.21.2 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 8.3.5-1.30.3, 8.3.10-1.33.2, 9.5.8-4.21.2 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 111 more |
Showing elements 61 - 80 out of 111