Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HertzBeat (incubating)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-48208

    Apache HertzBeat (incubating): Jmx JNDI injection vulnerability

    Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat . The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A succe…

    Apache Software Foundation Apache HertzBeat (incubating)
  • High 8.8
    CVE-2025-24404

    Apache HertzBeat (incubating): RCE by parse http sitemap xml response

    XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat. The attacker needs to have an authenticated account with access, and add monitor parsed by xml, returned special content can trigger the XML parsing vulnerability. This is…

    Apache Software Foundation Apache HertzBeat (incubating)