Skip to content
Apache Hertzbeat vulnerabilities
-
apache hertzbeat
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
CVE-2026-24343
8.8 High
-
apache hertzbeat, apache software foundation hertzbeat (incubating) +1 more
Apache HertzBeat (incubating): Jmx JNDI injection vulnerability
CVE-2025-48208
8.8 High
-
apache hertzbeat, apache software foundation hertzbeat (incubating) +1 more
Apache HertzBeat (incubating): RCE by parse http sitemap xml response
CVE-2025-24404
8.8 High
-
apache hertzbeat
Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss
CVE-2024-56736
6.5 Medium
-
apache hertzbeat
Apache HertzBeat: RCE by notice template injection vulnerability
CVE-2024-41151
8.8 High
-
apache hertzbeat
Apache HertzBeat: Exposure sensitive token via http GET method with query string
CVE-2024-45791
7.5 High
-
apache hertzbeat
Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
CVE-2024-45505
8.8 High
-
apache hertzbeat
Apache HertzBeat: RCE by snakeYaml deser load malicious xml
CVE-2024-42323
Public exploit
8.8 High
-
apache hertzbeat
GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import
CVE-2024-42362
8.8 High
-
apache hertzbeat
GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}
CVE-2024-42361
7.5 High
-
apache hertzbeat
HertzBeat SnakeYAML Deser RCE
CVE-2023-51389
9.8 Critical
-
apache hertzbeat
HertzBeat AviatorScript Inject RCE
CVE-2023-51388
9.8 Critical
-
apache hertzbeat
Hertzbeat JMX JNDI RCE
CVE-2023-51653
9.8 Critical
-
apache hertzbeat
Unauthorized access vulnerability on three interfaces
CVE-2023-51650
7.5 High
-
apache hertzbeat
Expression Injection Vulnerability in Hertzbeat
CVE-2023-51387
7.2 High
-
apache hertzbeat
Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat
CVE-2022-39337
7.5 High