S4E just found a critical-severity finding from cve-2022-27924 scanner

CVE

CVE-2024-21733

5.3

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

apache tomcat

Updated Oct 24, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2024-21733 Scanner

CVE-2024-21733 Scanner - HTTP Request Smuggling vulnerability in Apache Tomcat

Used 2.3k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: apache tomcat

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →