CVE-2025-41115 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 21, 2025
Last Seen
November 24, 2025

CVE-2025-41115 is a vulnerability tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed November 21, 2025; most recent activity November 24, 2025.

Related Threat Clusters

  • Critical Grafana SCIM Vulnerability Allows Privilege Escalation

    Grafana Labs has issued critical patches for a severe vulnerability, CVE-2025-41115, affecting Grafana Enterprise versions 12.0.0 to 12.2.1. The flaw in the SCIM provisioning feature could enable attackers to escalate…

    6 articles · Updated November 24, 2025
  • Critical Grafana SCIM Vulnerability Allows Privilege Escalation

    Grafana Labs has issued critical patches for a severe vulnerability (CVE-2025-41115) in its SCIM provisioning feature, which could enable attackers to escalate privileges or impersonate users. The flaw affects Grafana…

    6 articles · Updated November 21, 2025

Recent Intelligence Reports

  • Maximum severity Grafana vulnerability fixed — Scworld · November 24, 2025
  • Grafana Flags Maximum — Thecyberexpress · November 24, 2025
  • Critical Vulnerability Affecting Grafana Enterprise — Csa.Sg · November 22, 2025
  • Grafana warns of max severity admin spoofing vulnerability — Bleepingcomputer · November 21, 2025
  • Critical Grafana Flaw Lets Attackers Escalate Privileges — Gbhackers · November 21, 2025

Related Entities

Kimsuky Lazarus Malware Grafana Grafana Labs Microsoft Okta North Korea Xillen Stealer Amazon Managed Grafana Azure Bastion Azure Managed Grafana

CVSS v3.1 Breakdown