Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HertzBeat

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2026-24343

    Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions

    Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

    Apache Software Foundation Apache HertzBeat
  • High 8.8
    CVE-2024-41151

    Apache HertzBeat: RCE by notice template injection vulnerability

    Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.

    Apache Software Foundation Apache HertzBeat
  • High 7.5
    CVE-2024-45791

    Apache HertzBeat: Exposure sensitive token via http GET method with query string

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.

    Apache Software Foundation Apache HertzBeat
  • High 8.8
    CVE-2024-45505

    Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.…

    Apache Software Foundation Apache HertzBeat
  • High 8.8
    CVE-2024-42323 Public exploit

    Apache HertzBeat: RCE by snakeYaml deser load malicious xml

    SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to versi…

    Apache Software Foundation Apache HertzBeat