CVE-2025-4123
๐๏ธย 22 May 2025ย 07:44:09Reported byย GRAFANATypeย 
ย cve๐ย web.nvd.nist.gov๐ฐ๏ธย 15ย Media mentions๐ย 460ย Views
| Reporter | Title | Published | Views | Family All 211 |
|---|---|---|---|---|
 | grafana -- XSS vulnerability | 26 Apr 202500:00 | โ | freebsd |
| Grafana -- User deletion issue | 15 Apr 202500:00 | โ | freebsd |
 | Exploit for Open Redirect in Grafana | 4 Jun 202512:42 | โ | githubexploit |
| Exploit for Open Redirect in Grafana | 22 May 202515:34 | โ | githubexploit |
| Exploit for Open Redirect in Grafana | 6 Jun 202520:24 | โ | githubexploit |
 | CVE-2025-4123 | 22 May 202500:00 | โ | attackerkb |
 | Alibaba Cloud Linux 3 : 0074: grafana (ALINUX3-SA-2025:0074) | 27 May 202500:00 | โ | nessus |
| AlmaLinux 9 : grafana (ALSA-2025:7893) | 26 May 202500:00 | โ | nessus |
| AlmaLinux 8 : grafana (ALSA-2025:7894) | 20 May 202500:00 | โ | nessus |
| Rocky Linux 10.0 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2025_7892) | 1 Oct 202600:00 | โ | nessus |
10
Node
OR
[
{
"defaultStatus": "unaffected",
"product": "Grafana",
"vendor": "Grafana",
"versions": [
{
"lessThan": "10.4.19",
"status": "affected",
"version": "10.4.18+security-01",
"versionType": "semver"
},
{
"lessThan": "11.2.10",
"status": "affected",
"version": "11.2.9+security-01",
"versionType": "semver"
},
{
"lessThan": "11.3.7",
"status": "affected",
"version": "11.3.6+security-01",
"versionType": "semver"
},
{
"lessThan": "11.4.5",
"status": "affected",
"version": "11.4.4+security-01",
"versionType": "semver"
},
{
"lessThan": "11.5.5",
"status": "affected",
"version": "11.5.4+security-01",
"versionType": "semver"
},
{
"lessThan": "11.6.2",
"status": "affected",
"version": "11.6.1+security-01",
"versionType": "semver"
},
{
"lessThan": "12.0.1",
"status": "affected",
"version": "12.0.0+security-01",
"versionType": "semver"
}
]
}
]
10
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:32Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.16.1 - 7.6
EPSS0.97007
SSVC