Vulnerabilities

TI-2025-38184 CVE-2025-61795 · GHSA-hgrr-935x-pq79

Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS

LOW 27

Improper Resource Shutdown or Release vulnerability in Apache Tomcat.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01249 Published 2025-10-27 Partial fix · 11.0.12, 10.1.47 +1 CWE-404

TI-2025-35172 CVE-2025-55752 · GHSA-wmwf-9ccg-fff5

HIGH 71

Relative Path Traversal vulnerability in Apache Tomcat.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.64413 Published 2025-10-27 Partial fix · 11.0.11, 10.1.45 +1 CWE-23

TI-2025-35174 CVE-2025-55754 · GHSA-vfww-5hm6-hx2j

MEDIUM 55

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.10338 Published 2025-10-27 Partial fix · 11.0.11, 10.1.45 +1 CWE-150