AH
Product
Apache HertzBeat
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 1Low 0
Watch
Add Apache HertzBeat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24343 | 8.8 | Feb 10 | Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions Affected: 1.7.1 before 1.8.0 |
| CVE-2024-41151 | 8.8 | Nov 18 | Apache HertzBeat: RCE by notice template injection vulnerability Affected: before 1.6.1 |
| CVE-2024-45505 | 8.8 | Nov 18 | Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities Affected: before 1.6.1 |
| CVE-2024-42323 | 8.8 | Sep 21 | Apache HertzBeat: RCE by snakeYaml deser load malicious xml Affected: before 1.6.0 |
| CVE-2024-45791 | 7.5 | Nov 18 | Apache HertzBeat: Exposure sensitive token via http GET method with query string Affected: before 1.6.1 |
| CVE-2024-56736 | 6.5 | Apr 16 | Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss Affected: before 1.7.0 |
Showing 6