Product by Dromara

    Hertzbeat

    6 known vulnerabilities in Hertzbeat (Dromara), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hertzbeat (Dromara)
    CriticalCVE-2023-51653

    Hertzbeat JMX JNDI RCE

    also in 1 other product

    9.8
    CriticalCVE-2023-51388

    HertzBeat AviatorScript Inject RCE

    also in 1 other product

    9.8
    CriticalCVE-2023-51389

    HertzBeat SnakeYAML Deser RCE

    also in 1 other product

    9.8
    HighCVE-2023-51387

    Expression Injection Vulnerability in Hertzbeat

    also in 1 other product

    7.2
    HighCVE-2022-39337

    Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat

    also in 1 other product

    7.5
    HighCVE-2023-51650

    Unauthorized access vulnerability on three interfaces

    also in 1 other product

    7.5

    All products by Dromara