Apache Hertzbeat
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_hertzbeat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Hertzbeat (a1c07914-8dbb-57fe-8990-e3c2cdbc5b22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24343 |
vulnerable | 2026-06-08 07:51:17.556833 |
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.
Published: 2026-02-10T09:28:52.465Z
Updated: 2026-02-10T15:37:07.090Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56736 |
vulnerable | 2026-06-08 06:56:13.088799 |
Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss
Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat (incubating): before 1.7.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Published: 2025-04-16T15:38:11.307Z
Updated: 2025-04-16T18:03:38.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45791 |
vulnerable | 2026-06-08 06:48:09.041318 |
Apache HertzBeat: Exposure sensitive token via http GET method with query string
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat: before 1.6.1.
Users are recommended to upgrade to version 1.6.1, which fixes the issue.
Published: 2024-11-18T08:45:23.459Z
Updated: 2024-11-18T15:04:55.582Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45505 |
vulnerable | 2026-06-08 06:48:06.400804 |
Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.1.
Users are recommended to upgrade to version 1.6.1, which fixes the issue.
Published: 2024-11-18T08:44:46.165Z
Updated: 2024-11-18T15:05:53.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42323 |
vulnerable | 2026-06-08 06:43:56.421036 |
Apache HertzBeat: RCE by snakeYaml deser load malicious xml
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.0.
Users are recommended to upgrade to version 1.6.0, which fixes the issue.
Published: 2024-09-21T09:30:15.295Z
Updated: 2024-09-23T15:23:37.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41151 |
vulnerable | 2026-06-08 06:43:54.113446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.