Approved changes feed: RSS · Atom
cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Hertzbeat (db650799-4cb0-5e34-934b-5f914c6d6cdf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/apache/hertzbeat |
purl2cpe | 2026-06-01 10:14:25.247585 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24343 |
vulnerable | 2026-06-08 07:51:17.557788 |
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
Published: 2026-02-10T09:28:52.465Z
Updated: 2026-02-10T15:37:07.090Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48208 |
vulnerable | 2026-06-08 07:27:15.579766 |
Apache HertzBeat (incubating): Jmx JNDI injection vulnerability
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat .
The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A successful attack would result in arbitrary script execution.
This issue affects Apache HertzBeat: through 1.7.2.
Users are recommended to upgrade to version [1.7.3], which fixes the issue.
Published: 2025-09-09T09:31:35.585Z
Updated: 2025-11-04T21:10:58.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24404 |
vulnerable | 2026-06-08 07:12:48.575816 |
Apache HertzBeat (incubating): RCE by parse http sitemap xml response
XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat.
The attacker needs to have an authenticated account with access, and add monitor parsed by xml, returned special content can trigger the XML parsing vulnerability.
This issue affects Apache HertzBeat (incubating): before 1.7.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Published: 2025-09-09T09:30:59.424Z
Updated: 2025-11-04T21:09:42.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56736 |
vulnerable | 2026-06-08 06:56:13.089494 |
Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss
Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat (incubating): before 1.7.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Published: 2025-04-16T15:38:11.307Z
Updated: 2025-04-16T18:03:38.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45791 |
vulnerable | 2026-06-08 06:48:09.041343 |
Apache HertzBeat: Exposure sensitive token via http GET method with query string
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat: before 1.6.1.
Users are recommended to upgrade to version 1.6.1, which fixes the issue.
Published: 2024-11-18T08:45:23.459Z
Updated: 2024-11-18T15:04:55.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45505 |
vulnerable | 2026-06-08 06:48:06.401543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42362 |
vulnerable | 2026-06-08 06:43:56.478926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42361 |
vulnerable | 2026-06-08 06:43:56.477387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42323 |
vulnerable | 2026-06-08 06:43:56.420901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41151 |
vulnerable | 2026-06-08 06:43:54.114557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51653 |
vulnerable | 2026-06-08 06:17:53.681168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51650 |
vulnerable | 2026-06-08 06:17:53.675638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51389 |
vulnerable | 2026-06-08 06:16:17.425137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51388 |
vulnerable | 2026-06-08 06:16:17.424727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51387 |
vulnerable | 2026-06-08 06:16:17.424103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39337 |
vulnerable | 2026-06-08 05:47:18.620828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.