Products
IT management & monitoring
Prometheus
- Last 30 days
- 1
- Actively exploited (KEV)
- 0
- All CVEs
- 7
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-119566 | 6.3Medium |
prometheus prometheus
Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects
|
0.2% |
2026-10-30
10 d ago
|
| CVE-2026-44903 | 5.1Medium |
prometheus prometheus
Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI
|
0.2% |
2026-05-27
5 mo ago
|
| CVE-2026-42154 | 7.5High |
Red Hat File Integrity OperatorRed Hat OpenShift LightspeedRed Hat Ceph Storage 5
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
|
0.81% |
2026-05-04
6 mo ago
|
| CVE-2026-42151 | 7.5High |
Red Hat File Integrity OperatorRed Hat Logging Subsystem for Red Hat OpenShiftRed Hat Ceph Storage 5
Prometheus Azure AD remote write OAuth client secret exposed via config API
|
0.35% |
2026-05-04
6 mo ago
|
| CVE-2026-40179 | 5.3Medium |
prometheus prometheus
Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
|
0.31% |
2026-04-16
6 mo ago
|
| CVE-2023-40577 | 7.5High |
prometheus alertmanager
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
|
0.63% |
2023-08-25
39 mo ago
|
| CVE-2021-29622 | 6.5Medium |
prometheus prometheus
Arbitrary redirects under /new endpoint
|
19.56% |
2021-05-20
66 mo ago
|