CVE-2019-15043

—

CVSS 3.0

7.5 high

EPSS

63%p99

Published

Sep 3, 2019 (Sep 3, 2019)

Modified

Jun 17, 2026

Description

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.

Vendors: grafana
Products: grafana
Weakness: CWE-306
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (63.4%)

In the news0 stories

No ingested article mentions this CVE yet.