Prometheus vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
15 matching records
- Unknownprometheus-ha_cluster_exporter-1.4.3-1.1 on GA mediaOpen the advisoryOct 27, 2026
- Medium6.5The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the servCheck if you run itEPSS 0.37%Oct 13, 2026
- High8.1Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 10, 2026
- Medium5.1Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.20%May 26, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.35%Apr 27, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.81%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.19%Apr 27, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium5.7Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.18%Mar 19, 2026
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.92%Feb 20, 2026
- High7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.42%Feb 20, 2026
- Critical9.1Scraparr is a Prometheus Exporter for various components of the *arr Suite.Check if you run itEPSS 0.34%Feb 12, 2026
- High7.2Basic authentication bypassCheck if you run itEPSS 1.29%Nov 29, 2022
- Medium6.1Open Redirect under the /new endpointCheck this weekEPSS 19.56%May 18, 2021
- Medium6.1A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1.Check if you run itEPSS 2.50%Mar 26, 2019
Sort
15 records