Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache HertzBeat

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-114442

    Apache HertzBeat: incomplete XPath expression validation in aliasFields

    Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP collector XML parsing path. An authenticated user with permission to create monitor templates can supply XPath expressions through metrics.…

    Apache Software Foundation Apache HertzBeat
  • Medium 6.5
    CVE-2024-56736

    Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss

    Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to upgrade to version 1.7.0, which fixes the issue.

    Apache Software Foundation Apache HertzBeat