CVE-2025-6197 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-6197 Interim 1 4 2026-03-05T01:30:18Z current 2025-08-05T23:39:29Z 2026-03-05T01:30:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-6197 An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-October/023071.html E-Mail link for SUSE-SU-2025:3817-1 https://lists.suse.com/pipermail/sle-security-updates/2025-October/023070.html E-Mail link for SUSE-SU-2025:3819-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023598.html E-Mail link for SUSE-SU-2025:4457-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023628.html E-Mail link for SUSE-SU-2025:4458-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023614.html E-Mail link for SUSE-SU-2025:4482-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Manager Client Tools 12 SUSE Manager Client Tools 15 SUSE Manager Client Tools for SLE Micro 5 SUSE Multi Linux Manager Tools SLE-12 SUSE Multi Linux Manager Tools SLE-15 SUSE Multi Linux Manager Tools SLE-Micro-5 openSUSE Leap 15.6 openSUSE Tumbleweed Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 dracut-saltboot-1.0.0-150000.1.62.1 dracut-saltboot-1.0.0-150002.3.3.1 golang-github-prometheus-alertmanager-0.28.1-1.34.1 golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 grafana-11.5.10-1.87.1 grafana-11.5.10-150000.1.87.1 grafana-11.5.10-150200.3.80.1 grafana-11.5.7-120002.4.3.2 grafana-11.5.7-150002.4.3.3 grafana-11.6.3+security01-1.1 mgr-push-5.0.3-1.30.3 mgr-push-5.0.3-150000.1.30.1 mgr-push-5.1.4-120002.3.3.3 mgr-push-5.1.4-150002.3.3.3 mgrctl-0.1.37-1.27.1 mgrctl-0.1.37-150000.1.27.1 mgrctl-5.1.20-150002.3.3.3 mgrctl-bash-completion-0.1.37-1.27.1 mgrctl-bash-completion-0.1.37-150000.1.27.1 mgrctl-bash-completion-5.1.20-150002.3.3.3 mgrctl-lang-0.1.37-150000.1.27.1 mgrctl-lang-5.1.20-150002.3.3.3 mgrctl-zsh-completion-0.1.37-1.27.1 mgrctl-zsh-completion-0.1.37-150000.1.27.1 mgrctl-zsh-completion-5.1.20-150002.3.3.3 python-defusedxml-0.6.0-120002.1.3.1 python2-mgr-push-5.0.3-1.30.3 python2-mgr-push-5.1.4-120002.3.3.3 python2-rhnlib-5.0.6-21.55.1 python2-rhnlib-5.1.3-120002.3.3.1 python2-spacewalk-client-tools-5.1.7-120002.3.3.2 python3-defusedxml-0.7.1-150002.1.3.2 python3-mgr-push-5.0.3-150000.1.30.1 python3-mgr-push-5.1.4-150002.3.3.3 python3-rhnlib-5.0.6-150000.3.49.1 python3-rhnlib-5.1.3-150002.3.3.2 python3-spacewalk-client-tools-5.1.7-150002.3.3.3 spacecmd-5.0.14-150000.3.139.1 spacecmd-5.0.14-38.162.1 spacecmd-5.1.11-120002.3.3.2 spacecmd-5.1.11-150002.3.3.2 spacewalk-client-tools-5.1.7-120002.3.3.2 spacewalk-client-tools-5.1.7-150002.3.3.3 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 supportutils-plugin-susemanager-client-5.0.5-6.36.1 supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 grafana-11.5.10-150200.3.80.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 grafana-11.5.10-150200.3.80.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 golang-github-prometheus-alertmanager-0.28.1-1.34.1 as a component of SUSE Manager Client Tools 12 grafana-11.5.10-1.87.1 as a component of SUSE Manager Client Tools 12 mgr-push-5.0.3-1.30.3 as a component of SUSE Manager Client Tools 12 mgrctl-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 mgrctl-bash-completion-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 mgrctl-zsh-completion-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 python2-mgr-push-5.0.3-1.30.3 as a component of SUSE Manager Client Tools 12 python2-rhnlib-5.0.6-21.55.1 as a component of SUSE Manager Client Tools 12 spacecmd-5.0.14-38.162.1 as a component of SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client-5.0.5-6.36.1 as a component of SUSE Manager Client Tools 12 dracut-saltboot-1.0.0-150000.1.62.1 as a component of SUSE Manager Client Tools 15 grafana-11.5.10-150000.1.87.1 as a component of SUSE Manager Client Tools 15 mgr-push-5.0.3-150000.1.30.1 as a component of SUSE Manager Client Tools 15 mgrctl-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-bash-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-lang-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-zsh-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 python3-mgr-push-5.0.3-150000.1.30.1 as a component of SUSE Manager Client Tools 15 python3-rhnlib-5.0.6-150000.3.49.1 as a component of SUSE Manager Client Tools 15 spacecmd-5.0.14-150000.3.139.1 as a component of SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 as a component of SUSE Manager Client Tools 15 dracut-saltboot-1.0.0-150000.1.62.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-bash-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-lang-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-zsh-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 grafana-11.5.7-120002.4.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 mgr-push-5.1.4-120002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-12 python-defusedxml-0.6.0-120002.1.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-mgr-push-5.1.4-120002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-rhnlib-5.1.3-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-spacewalk-client-tools-5.1.7-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 spacecmd-5.1.11-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools-5.1.7-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 dracut-saltboot-1.0.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 grafana-11.5.7-150002.4.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgr-push-5.1.4-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-bash-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-lang-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-zsh-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-defusedxml-0.7.1-150002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-mgr-push-5.1.4-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-rhnlib-5.1.3-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-spacewalk-client-tools-5.1.7-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 spacecmd-5.1.11-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools-5.1.7-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 dracut-saltboot-1.0.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-bash-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-lang-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-zsh-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 dracut-saltboot-1.0.0-150000.1.62.1 as a component of openSUSE Leap 15.6 grafana-11.5.10-150200.3.80.1 as a component of openSUSE Leap 15.6 spacecmd-5.0.14-150000.3.139.1 as a component of openSUSE Leap 15.6 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 as a component of openSUSE Leap 15.6 grafana-11.6.3+security01-1.1 as a component of openSUSE Tumbleweed An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL CVE-2025-6197 SUSE Linux Enterprise Module for Package Hub 15 SP6:grafana-11.5.10-150200.3.80.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:grafana-11.5.10-150200.3.80.1 SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.28.1-1.34.1 SUSE Manager Client Tools 12:grafana-11.5.10-1.87.1 SUSE Manager Client Tools 12:mgr-push-5.0.3-1.30.3 SUSE Manager Client Tools 12:mgrctl-0.1.37-1.27.1 SUSE Manager Client Tools 12:mgrctl-bash-completion-0.1.37-1.27.1 SUSE Manager Client Tools 12:mgrctl-zsh-completion-0.1.37-1.27.1 SUSE Manager Client Tools 12:python2-mgr-push-5.0.3-1.30.3 SUSE Manager Client Tools 12:python2-rhnlib-5.0.6-21.55.1 SUSE Manager Client Tools 12:spacecmd-5.0.14-38.162.1 SUSE Manager Client Tools 12:supportutils-plugin-susemanager-client-5.0.5-6.36.1 SUSE Manager Client Tools 15:dracut-saltboot-1.0.0-150000.1.62.1 SUSE Manager Client Tools 15:grafana-11.5.10-150000.1.87.1 SUSE Manager Client Tools 15:mgr-push-5.0.3-150000.1.30.1 SUSE Manager Client Tools 15:mgrctl-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-bash-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-lang-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-zsh-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:python3-mgr-push-5.0.3-150000.1.30.1 SUSE Manager Client Tools 15:python3-rhnlib-5.0.6-150000.3.49.1 SUSE Manager Client Tools 15:spacecmd-5.0.14-150000.3.139.1 SUSE Manager Client Tools 15:supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-1.0.0-150000.1.62.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-bash-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-lang-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-zsh-completion-0.1.37-150000.1.27.1 SUSE Multi Linux Manager Tools SLE-12:Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 SUSE Multi Linux Manager Tools SLE-12:Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 SUSE Multi Linux Manager Tools SLE-12:grafana-11.5.7-120002.4.3.2 SUSE Multi Linux Manager Tools SLE-12:mgr-push-5.1.4-120002.3.3.3 SUSE Multi Linux Manager Tools SLE-12:python-defusedxml-0.6.0-120002.1.3.1 SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-5.1.4-120002.3.3.3 SUSE Multi Linux Manager Tools SLE-12:python2-rhnlib-5.1.3-120002.3.3.1 SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-5.1.7-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:spacecmd-5.1.11-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-5.1.7-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.0.0-150002.3.3.1 SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.7-150002.4.3.3 SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.4-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:python3-defusedxml-0.7.1-150002.1.3.2 SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.4-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.3-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.7-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.11-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.7-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.0.0-150002.3.3.1 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.20-150002.3.3.3 openSUSE Leap 15.6:dracut-saltboot-1.0.0-150000.1.62.1 openSUSE Leap 15.6:grafana-11.5.10-150200.3.80.1 openSUSE Leap 15.6:spacecmd-5.0.14-150000.3.139.1 openSUSE Leap 15.6:supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 openSUSE Tumbleweed:grafana-11.6.3+security01-1.1 moderate 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N