Priority MEDIUM 41
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00748 · Published 2026-02-10 · Fixed in 1.8.0 CWE-643
Priority MEDIUM 41
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat .
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0067 · Published 2025-09-09 · No fix listed CWE-90
Priority MEDIUM 41
XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00552 · Published 2025-09-09 · Fixed in 1.7.0 CWE-91
Priority LOW 30
Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00664 · Published 2025-04-16 · Fixed in 1.7.0 CWE-918
Priority MEDIUM 42
Deserialization of Untrusted Data vulnerability in Apache HertzBeat.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00983 · Published 2024-11-18 · Fixed in 1.6.1 CWE-502
Priority MEDIUM 40
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00848 · Published 2024-11-18 · Fixed in 1.6.1 CWE-200
Priority MEDIUM 44
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0221 · Published 2024-11-18 · Fixed in 1.6.1 CWE-77
Priority MEDIUM 51
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.08322 · Published 2024-09-21 · Fixed in 1.6.0 CWE-502
Priority HIGH 73
Hertzbeat is an open source, real-time monitoring system.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0133 · Published 2024-08-20 · Fixed in 1.6.0 CWE-502
Priority HIGH 81
Hertzbeat is an open source, real-time monitoring system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0108 · Published 2024-08-20 · No fix listed CWE-89
Priority HIGH 75
Hertzbeat is a real-time monitoring system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01283 · Published 2024-02-22 · Fixed in 1.4.1 CWE-502
Priority HIGH 82
Hertzbeat is a real-time monitoring system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01298 · Published 2024-02-22 · Fixed in 1.4.1 CWE-74
Priority MEDIUM 53
Hertzbeat is a real-time monitoring system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02113 · Published 2024-02-22 · Fixed in 1.4.1 CWE-74
Priority HIGH 74
Hertzbeat is an open source, real-time monitoring system.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00865 · Published 2023-12-22 · Fixed in 1.4.1 CWE-862
Priority MEDIUM 41
Hertzbeat is an open source, real-time monitoring system.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01449 · Published 2023-12-22 · Fixed in 1.4.1 CWE-94
Priority LOW 35
Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01102 · Published 2023-12-22 · No fix listed CWE-284
THREATIST.IORead the docs