Red Hat Security AdvisoryRHSA-2025:11332
tomcat9 security update
Released 2025-07-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) tomcat9-1:9.0.87-5.el10_0.1, tomcat9-admin-webapps-1:9.0.87-5.el10_0.1, tomcat9-docs-webapp-1:9.0.87-5.el10_0.1 +5
Fixes 3 records
Priority HIGH 82
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configura…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.31824 · Published 2024-12-17 · Partial fix · 11.0.2, 10.1.34 +1 CWE-367
Priority HIGH 74
Improper Input Validation vulnerability in Apache Tomcat.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.61322 · Published 2025-04-28 · Partial fix · 9.0.104, 10.1.40 +1 CWE-459
Priority MEDIUM 60
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08969 · Published 2024-12-20 · Partial fix · 11.0.2, 10.1.34 +1 CWE-367
