Prometheus
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 26, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
Prometheus Azure AD remote write OAuth client secret exposed via config API
Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
Prometheus Exporter Toolkit vulnerable to basic authentication bypass
Uncontrolled Resource Consumption in promhttp
Arbitrary redirects under /new endpoint
Monitor Prometheus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.