Apache Hertzbeat (Apache Software Foundation) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-10. Vendor: Apache Software Foundation.
CVEs of Apache Hertzbeat
- CVE-2026-24343 - CVSS 8.8 (high), 2026-02-10: Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from…
- CVE-2024-56736 - CVSS 6.5 (medium), 2025-04-16: Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to…
- CVE-2024-41151 - CVSS 8.8 (high), 2024-11-18: Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects…
- CVE-2024-45791 - CVSS 7.5 (high), 2024-11-18: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: before 1.6.1. Users are…
- CVE-2024-45505 - CVSS 8.8 (high), 2024-11-18: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can…
- CVE-2024-42323 - CVSS 8.8 (high), 2024-09-21: SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This…
