Known vulnerabilities in grafana - page 5
Vendor:
SUSE
Software:
grafana
Software CPE:
cpe:2.3:o:suse:grafana:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
111
Public exploits:
10
Known exploited (KEV):
2
Breakdown by Severity Chart
12.4.5-150200.3.91.1
12.4.5-160002.1.1
12.4.5-150000.1.98.1
12.4.5-150002.4.24.1
11.6.14+security04-160002.1.1
11.6.14+security04-150002.4.21.1
11.6.14+security01-150200.3.88.1
11.6.14+security01-150000.1.95.2
11.6.14+security01-150002.4.14.1
11.6.14+security01-160002.1.1
11.6.11-159000.2.3.2
11.6.11-150200.3.83.1
11.6.11-150000.1.90.1
11.5.10-150002.4.9.1
11.5.10-120002.4.9.1
11.5.10-150200.3.80.1
11.5.10-1.87.1
11.5.10-150002.4.6.1
11.5.10-120002.4.6.1
11.5.7-150002.4.3.3
11.5.7-120002.4.3.2
11.5.5-150200.3.72.2
11.5.5-150000.1.79.1
11.5.5-1.79.2
10.4.15-150200.3.67.1
10.4.15-150200.3.69.1
10.4.15-1.75.1
10.4.15-150000.1.75.1
10.4.15-150000.1.71.1
10.4.15-150200.3.64.1
10.4.15-1.71.1
10.4.13-150200.3.59.1
10.4.13-150000.1.66.1
10.4.13-1.66.2
9.5.18-4.30.4
9.5.18-159000.4.33.4
9.5.18-150200.3.56.1
9.5.18-150000.1.63.2
9.5.18-1.63.1
9.5.16-159000.4.30.2
9.5.16-4.27.1
9.5.8-1.60.1
9.5.8-150000.1.60.2
9.5.8-4.21.2
9.5.8-159000.4.24.1
9.5.5-1.54.3
9.5.5-150000.1.54.3
9.5.5-150200.3.47.1
9.5.5-150000.1.51.1
9.5.5-1.51.1
9.5.5-150200.3.44.1
9.5.1-150200.3.41.3
9.5.1-150000.1.48.5
9.5.1-1.48.1
8.5.22-1.45.1
8.5.22-150000.1.45.1
8.5.22-150200.3.38.1
8.5.20-1.42.1
8.5.20-150000.1.42.1
8.5.20-150200.3.35.1
8.3.5-150000.1.30.1
7.5.12-159000.4.18.3
7.5.12-4.18.1
7.5.12-1.27.1
8.5.15-150200.3.32.1
8.5.15-150000.1.39.1
8.5.15-1.39.1
8.3.10-150000.1.33.1
8.3.10-1.33.2
8.3.10-150200.3.26.1
8.5.13-150100.3.12.1
7.5.12-150100.3.9.1
6.7.4-3.29.1
6.7.4-4.23.1
8.3.5-1.30.3
7.5.7-4.15.3
7.5.7-4.15.1
7.5.7-1.21.2
7.5.7-1.21.1
6.7.4-1.24.2
7.3.1-3.6.1
Vulnerabilities (111)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78913 - Improper Certificate Validation CVE-2023-29409 |
CWE-295 | Medium | 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.5-150200.3.47.1 | 03.08.2023 |
SB2023080320 SB2023080321 SB2023080370 and 98 more |
||
| #VU78470 - Missing Authorization CVE-2023-2183 |
CWE-862 | Low | 9.5.5-1.51.1, 9.5.5-150000.1.51.1, 9.5.5-150200.3.44.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 20.07.2023 |
SB20230720110 SB20230720114 SB20230720115 and 9 more |
||
| #VU77623 - Improper Synchronization CVE-2023-2801 |
CWE-662 | Medium | 9.5.5-1.51.1, 9.5.5-150000.1.51.1, 9.5.5-150200.3.44.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 22.06.2023 |
SB2023062244 SB20230720114 SB20230720115 and 8 more |
||
| #VU77620 - Exposure of sensitive information to an unauthorized actor CVE-2023-1387 |
CWE-200 | Medium | 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 22.06.2023 |
SB2023062227 SB2023062230 SB2023062231 and 7 more |
||
| #VU75360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-1410 |
CWE-79 | Low | 8.5.22-1.45.1, 8.5.22-150000.1.45.1, 8.5.22-150200.3.38.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 19.04.2023 |
SB2023041950 SB2023041951 SB2023041952 and 11 more |
||
| #VU75359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-0594 |
CWE-79 | Low | 8.5.22-1.45.1, 8.5.22-150000.1.45.1, 8.5.22-150200.3.38.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 19.04.2023 |
SB2023041949 SB2023041951 SB2023041952 and 6 more |
||
| #VU75358 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-0507 |
CWE-79 | Low | 8.5.22-1.45.1, 8.5.22-150000.1.45.1, 8.5.22-150200.3.38.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 19.04.2023 |
SB2023041949 SB2023041951 SB2023041952 and 6 more |
||
| #VU72686 - Resource exhaustion CVE-2022-41723 |
CWE-400 | Medium | 8.5.20-1.42.1, 8.5.20-150000.1.42.1, 8.5.20-150200.3.35.1, 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 01.03.2023 |
SB2023030130 SB2023030131 SB2023030946 and 190 more |
||
| #VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2022-39324 |
CWE-451 | Low | 8.5.20-1.42.1, 8.5.20-150000.1.42.1, 8.5.20-150200.3.35.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 26.01.2023 |
SB2023012631 SB2023032032 SB2023032033 and 12 more |
||
| #VU69691 - Use of Password Hash Instead of Password for Authentication CVE-2022-46146 |
CWE-836 | Low | 8.5.20-1.42.1, 8.5.20-150000.1.42.1, 8.5.20-150200.3.35.1, 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 29.11.2022 |
SB2022112926 SB2022113012 SB2023022044 and 33 more |
||
| #VU69485 - Exposure of sensitive information to an unauthorized actor CVE-2022-39307 |
CWE-200 | Medium | 8.5.15-1.39.1, 8.5.15-150000.1.39.1, 8.5.15-150200.3.32.1, 9.5.8-4.21.2, 9.5.8-159000.4.24.1 | 22.11.2022 |
SB2022112220 SB2023021202 SB2023021203 and 12 more |
||
| #VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-1734 |
CWE-78 | High | 6.7.4-3.29.1, 6.7.4-4.23.1 | 22.09.2022 |
SB2022092241 SB2022092242 SB2020041808 and 1 more |
||
| #VU57422 - Information Exposure Through an Error Message CVE-2021-3620 |
CWE-209 | Low | 9.5.8-159000.4.24.1 | 19.10.2021 |
SB2021101903 SB2021101904 SB2021101905 and 11 more |
||
| #VU54626 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3583 |
CWE-94 | High | 9.5.8-159000.4.24.1 | 08.07.2021 |
SB2021070822 SB2021070823 SB2021071517 and 13 more |
||
| #VU52984 - Information Exposure Through Log Files CVE-2021-3447 |
CWE-532 | Low | 9.5.8-159000.4.24.1 | 10.05.2021 |
SB2021040180 SB2021051001 SB2021072616 and 13 more |
||
| #VU50936 - Information Exposure Through Log Files CVE-2021-20191 |
CWE-532 | Low | 9.5.8-159000.4.24.1 | 25.02.2021 |
SB2021022511 SB2021022512 SB2021022513 and 11 more |
||
| #VU50818 - Information Exposure Through Log Files CVE-2021-20228 |
CWE-532 | Low | 9.5.8-159000.4.24.1 | 22.02.2021 |
SB2021022203 SB2021022205 SB2021022512 and 7 more |
||
| #VU50429 - Information Exposure Through Log Files CVE-2021-20180 |
CWE-532 | Low | 9.5.8-159000.4.24.1 | 09.02.2021 |
SB2021020903 SB2021020904 SB2021022512 and 11 more |
||
| #VU50428 - Information Exposure Through Log Files CVE-2021-20178 |
CWE-532 | Low | 9.5.8-159000.4.24.1 | 09.02.2021 |
SB2021020903 SB2021020904 SB2021022512 and 10 more |
||
| #VU24218 - Improper input validation CVE-2019-11287 |
CWE-20 | Medium | 6.7.4-3.29.1, 6.7.4-4.23.1 | 13.01.2020 |
SB2019112307 SB2020011311 SB2021062428 and 5 more |
Showing elements 81 - 100 out of 111