[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsibv2nMVOFKFH82UaBnfo_DgpD__VUZyuDtV4em1ub4":3,"g5a-risk:CVE-2019-15043":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":47,"references":48,"referencesCount":37,"weaknesses":86,"weaknessesCount":47,"isActivelyExploited":95,"cisaInfo":15,"otxData":15,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":136,"notableEvents":137},"CVE-2019-15043","What is CVE-2019-15043?","In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.","In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against th...","2019-09-03T12:15:10.933","2023-11-07T03:05:24.357",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.63388,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"grafana","*","cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",1,[49,53,56,59,64,68,72,75,79,82],{"url":50,"source":51,"tags":52},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-06\u002Fmsg00060.html","Opensuse",[],{"url":54,"source":51,"tags":55},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-07\u002Fmsg00083.html",[],{"url":57,"source":51,"tags":58},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-10\u002Fmsg00009.html",[],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fcommunity.grafana.com\u002Ft\u002Fgrafana-5-4-5-and-6-3-4-security-update\u002F20569","Grafana",[63],"Vendor Advisory",{"url":65,"source":61,"tags":66},"https:\u002F\u002Fcommunity.grafana.com\u002Ft\u002Frelease-notes-v6-3-x\u002F19202",[67],"Release Notes",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fgithub.com\u002Fgrafana\u002Fgrafana\u002Freleases","GitHub",[67],{"url":73,"source":61,"tags":74},"https:\u002F\u002Fgrafana.com\u002Fblog\u002F2019\u002F08\u002F29\u002Fgrafana-5.4.5-and-6.3.4-released-with-important-security-fix\u002F",[67,63],{"url":76,"source":77,"tags":78},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FRF5ARGYX3WYB7H2FDR7VAWTEQ27UX3FU\u002F","Fedoraproject",[],{"url":80,"source":77,"tags":81},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUO4NBL7PKW4OSFRVZENGC42EWEJV2YAH\u002F",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20191004-0004\u002F","Netapp",[],[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2019-15043? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15043, a high severity cyber security vulnerability from 2019. High exploit probability (63.4%). In Grafana 2.x through 6....","CVE-2019-15043, CVE-2019-15043 vulnerability, CVE-2019-15043 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, grafana security, grafana vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-15043",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15043","Cybersecurity","CVE-2019-15043, CVE-2019-15043 vulnerability, CVE-2019-15043 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":15,"Negate":15,"Nodes":124},[125],{"Operator":126,"Negate":15,"CPEMatch":127},"OR",[128,132],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":129,"VersionStartExcluding":15,"VersionStartIncluding":130,"VersionEndExcluding":131,"VersionEndIncluding":15},"35B2F43D-9037-4FA6-853E-1B00E1E96457","2.0.0","5.4.5",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":134,"VersionEndExcluding":135,"VersionEndIncluding":15},"52DED895-3E2B-4109-96D4-59EBA368A9BA","6.0.0","6.3.4",[],[138,145],{"id":139,"eventType":140,"eventTime":141,"details":142,"label":143,"color":144},"c2da5db4-3322-4d96-9a5e-0a3276d3f2d3","LOW_EPSS_DELTA","2025-11-19T04:06:36.890988+00:00","Daily EPSS score decreased by 0.593 on 2023-12-30","EPSS Score Decreased","green",{"id":146,"eventType":147,"eventTime":148,"details":149,"label":150,"color":151},"c6a565f4-7fd2-4587-8eb8-31a8fd84241a","HIGH_EPSS_DELTA","2025-11-22T04:06:24.852851+00:00","Daily EPSS score increased by 0.592 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":153,"version":32},1792262237271,{"score":155,"band":156,"action":157,"scoredAt":158},55,"Medium","Plan remediation","2026-10-16T06:46:49.837015+00:00"]