Advisories · Technology

Apache Software Foundation Apache HertzBeat.

Every CVE that names Apache Software Foundation Apache HertzBeat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114442 CVE record

Apache HertzBeat: incomplete XPath expression validation in aliasFields
- Apache Software Foundation Apache HertzBeat
- Other injection
Not analysed yet 3 Nov 2026
CVE-2026-24343 CVE record

CVSS 8.8 High

Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
- Apache Software Foundation Apache HertzBeat
- Other injection
Not analysed yet 10 Feb 2026
CVE-2024-56736 CVE record

CVSS 6.5 Medium

Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss
- Apache Software Foundation Apache HertzBeat
- Server-side request forgery (SSRF)
Not analysed yet 16 Apr 2025
CVE-2024-41151 CVE record

CVSS 8.8 High

Apache HertzBeat: RCE by notice template injection vulnerability
- Apache Software Foundation Apache HertzBeat
- Insecure deserialization
Not analysed yet 18 Nov 2024
CVE-2024-45791 CVE record

CVSS 7.5 High

Apache HertzBeat: Exposure sensitive token via http GET method with query string
- Apache Software Foundation Apache HertzBeat
- Information disclosure
Not analysed yet 18 Nov 2024
CVE-2024-45505 CVE record

CVSS 8.8 High

Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
- Apache Software Foundation Apache HertzBeat
- Command injection
Not analysed yet 18 Nov 2024
CVE-2024-42323 CVE record

CVSS 8.8 High

Apache HertzBeat: RCE by snakeYaml deser load malicious xml
- Apache Software Foundation Apache HertzBeat
- Insecure deserialization
Not analysed yet 21 Sept 2024