ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +6797 more potentially affected by CVE-2024-21733 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m11, <=9.0.43)

🗓️ 19 Jan 2024 12:30:18Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 4 Views

Known vulnerability in org.apache.tomcat.embed:tomcat-embed-core.

Reporter	Title	Published	Views	Family All 111
zdt	Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling Vulnerability	1 Feb 202400:00	–	zdt
GithubExploit	Sn1per	6 Sep 201515:47	–	githubexploit
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Apache Tomcat	15 Aug 202409:47	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products (CVE-2023-45648, CVE-2023-42795, CVE-2023-46589, CVE-2024-21733)	30 Apr 202416:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2024-017)	6 Feb 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-011)	6 Feb 202400:00	–	nessus

18 Jun 2026 23:30Current

CVSS 3.15.3

EPSS0.14286

SSVC

org.apache.tomcat.embed:tomcat-embed-core library