Grafana Enterprise Metrics — known CVE vulnerabilities

Every CVE whose affected-product data names Grafana Enterprise Metrics, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-44643 — CVSS 5.7 (medium): A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended…
• CVE-2021-31231 — CVSS 5.5 (medium): The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when…