grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

BIT-GRAFANA-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

CVE-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

Malicious code in experience-manager-apis (npm)

Source: amazon-inspector 0e959a5d21f7ee8776c741397783dbeed1d64e6d57e97ef74bb3bc678710a8ad The package experience-manager-apis was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2025-37542

Malicious code in experience-manager-apis npm...

MAL-2025-49339 Malicious code in experience-manager-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e959a5d21f7ee8776c741397783dbeed1d64e6d57e97ef74bb3bc678710a8ad The package experience-manager-apis was found to contain malicious code...

Malicious code in experience-manager-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e959a5d21f7ee8776c741397783dbeed1d64e6d57e97ef74bb3bc678710a8ad The package experience-manager-apis was found to contain malicious code...

CVE-2024-5957

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...

CVE-2024-5957

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...

CVE-2024-5957

This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager...

CVE-2024-5957

CVE-2024-5957 : The provided documents corroborate a vulnerability in Trellix Manager where unauthenticated remote attackers can bypass authentication and gain access to the Manager’s APIs. The exact affected product versions, root cause details, and a formal fix are not specified in the supplied...

PT-2024-37270 · Imanage · Imanager

Name of the Vulnerable Software and Affected Versions: Manager affected versions not specified Description: This issue allows unauthenticated remote attackers to bypass authentication and gain access to the Manager's APIs. The estimated number of potentially affected devices worldwide is not...