CveMateVulnerability intelligence

Apache Software Foundation Apache Hertzbeat vulnerabilities

6 vulnerabilities

Known vulnerabilities in Apache Software Foundation Apache Hertzbeat, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2024-41151apache software foundationapache hertzbeat+11y ago18-11-2024 08:45

Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.CVE-2024-42323apache software foundationapache hertzbeat+12y ago21-09-2024 09:30

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue.CVE-2024-56736apache software foundationapache hertzbeat+11y ago16-04-2025 15:38

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to upgrade to version 1.7.0, which fixes the issue.CVE-2024-45791apache software foundationapache hertzbeat+11y ago18-11-2024 08:45

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.CVE-2024-45505apache software foundationapache hertzbeat+11y ago18-11-2024 08:44

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.CVE-2026-24343apache software foundationapache hertzbeat+18mo ago10-02-2026 09:28

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.