apache hertzbeat

Name: apache hertzbeat
Brand: apache

productUS

cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

4critical6high0medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-42323US	—	8.32% (95th)	Exploit	1.6.0	2024-09-21	< 1.6.0
CVE-2024-45505US	—	2.21% (82nd)	—	1.6.1	2024-11-18	< 1.6.1
CVE-2023-51653US	critical9.8	2.11% (82nd)	—	1.4.1	2024-02-22	< 1.4.1
CVE-2023-51387US	high8.8	1.45% (73rd)	—	1.4.1	2023-12-22	< 1.4.1
CVE-2024-42362US	high8.8	1.33% (71st)	—	1.6.0	2024-08-20	< 1.6.0
CVE-2023-51388US	critical9.8	1.30% (70th)	—	1.4.1	2024-02-22	< 1.4.1
CVE-2023-51389US	critical9.8	1.28% (70th)	—	1.4.1	2024-02-22	< 1.4.1
CVE-2022-39337US	high7.5OT elevated	1.10% (65th)	—	1.2.1	2023-12-22	< 1.2.1
CVE-2024-42361US	critical9.8	1.08% (65th)	—	1.6.0	2024-08-20	< 1.6.0
CVE-2024-41151US	—	0.98% (62nd)	—	1.6.1	2024-11-18	< 1.6.1
CVE-2023-51650US	high7.5OT elevated	0.86% (58th)	—	1.4.1	2023-12-22	< 1.4.1
CVE-2024-45791US	—	0.85% (58th)	—	1.6.1	2024-11-18	< 1.6.1
CVE-2026-24343US	—	0.80% (56th)	—	1.8.0	2026-02-10	1.7.1 → 1.8.0
CVE-2025-48208US	high8.8	0.67% (52nd)	—	1.7.3	2025-09-09	< 1.7.3
CVE-2024-56736US	—	0.66% (51st)	—	1.7.0	2025-04-16	< 1.7.0
CVE-2025-24404US	high8.8	0.55% (46th)	—	1.7.0	2025-09-09	< 1.7.0

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data4 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-643Improper Neutralization of Data within XPath Expressions ('XPath Injection')1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-862Missing Authorization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.