Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Hosting

Grafana

The open-source platform for monitoring and observability.

Official Site:

https://grafana.com/get

Severity Summary:

Critical: 8 High: 34 Medium: 53 Low: 6
Reference
Title
Severity
CVE-2026-33381
Grafana Improper Access Control Vulnerability
High
CVE-2026-42127
Grafana Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2026-8609
Grafana Uncontrolled Resource Consumption Vulnerability
High
CVE-2021-27358
Grafana Vulnerability
High
CVE-2022-39306
Grafana Improper Input Validation Vulnerability
High
CVE-2022-21703
Grafana Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2021-28148
Grafana Improper Authentication Vulnerability
High
CVE-2019-15043
Grafana Missing Authentication for Critical Function Vulnerability
High
CVE-2021-27962
Grafana Incorrect Permission Assignment for Critical Resource Vulnerability
High
CVE-2021-39226
Grafana Improper Authentication Vulnerability
High
CVE-2021-43798
Grafana Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2020-13379
Grafana Server-Side Request Forgery (SSRF) Vulnerability
High
CVE-2026-28375
Grafana Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2026-33375
Grafana Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2020-12245
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-12141
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2026-21722
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2026-27879
Grafana Out-of-bounds Write Vulnerability
Medium
CVE-2025-41117
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-12052
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-12458
Grafana Cleartext Storage of Sensitive Information Vulnerability
Medium
CVE-2026-21724
Grafana Improper Authorization Vulnerability
Medium
CVE-2019-15635
Grafana Insufficiently Protected Credentials Vulnerability
Medium
CVE-2020-12459
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2022-21702
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-28376
Grafana Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-33378
Grafana Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2018-18623
Grafana Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-28383
Grafana Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2026-28380
Grafana Missing Authorization Vulnerability
Medium