Multiple vulnerabilities in Apache Tomcat

Description

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Security vulnerability in Apache Tomcat can be exploited to bypass security restrictions.
2. A remote code execution vulnerability can be exploited remotely to execute arbitrary code.
3. Denial of service vulnerability can be exploited remotely to cause denial of service.

Original advisories

• Apache Tomcat 9.x vulnerabilities

Related products

• Apache-Tomcat

CVE list

• CVE-2025-48976
  unknown
• CVE-2025-49125
  unknown
• CVE-2025-48988
  unknown
• CVE-2025-49124
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com