Login Request a demo
HE
Product
hertzbeat
by dromara · last CVE Aug 20, 2024
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 4Medium 0Low 0
Severity
All severities7Critical3High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add hertzbeat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51389
9.8
1%
Feb 22
HertzBeat SnakeYAML Deser RCE
Affected: < 1.4.1
CVE-2023-51388
9.8
1%
Feb 22
HertzBeat AviatorScript Inject RCE
Affected: < 1.4.1
CVE-2023-51653
9.8
2%
Feb 22
Hertzbeat JMX JNDI RCE
Affected: < 1.4.1
CVE-2024-42362
8.8
1%
Aug 20
GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import
Affected: before 1.6.0
CVE-2023-51387
8.8
1%
Dec 22
Expression Injection Vulnerability in Hertzbeat
Affected: < 1.4.1
CVE-2023-51650
7.5
1%
Dec 22
Unauthorized access vulnerability on three interfaces
Affected: < 1.4.1
CVE-2022-39337
7.5
1%
Dec 22
Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat
Affected: <= 1.2.0
Showing 7