Apache Hertzbeat (Incubating)
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_hertzbeat_(incubating):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Hertzbeat (Incubating) (563bd495-6308-599e-ab5d-77c0f49aa828) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48208 |
vulnerable | 2026-06-08 07:27:15.579122 |
Apache HertzBeat (incubating): Jmx JNDI injection vulnerability
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat .
The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A successful attack would result in arbitrary script execution.
This issue affects Apache HertzBeat: through 1.7.2.
Users are recommended to upgrade to version [1.7.3], which fixes the issue.
Published: 2025-09-09T09:31:35.585Z
Updated: 2025-11-04T21:10:58.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24404 |
vulnerable | 2026-06-08 07:12:48.574902 |
Apache HertzBeat (incubating): RCE by parse http sitemap xml response
XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat.
The attacker needs to have an authenticated account with access, and add monitor parsed by xml, returned special content can trigger the XML parsing vulnerability.
This issue affects Apache HertzBeat (incubating): before 1.7.0.
Users are recommended to upgrade to version 1.7.0, which fixes the issue.
Published: 2025-09-09T09:30:59.424Z
Updated: 2025-11-04T21:09:42.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.