Lucene search
HistoryApr 12, 2021 - 3:50 p.m.
8.5 and 8.13 LTS releases should bundle Tomcat 8.5.63 or higher
0.002 Low
EPSS
Percentile
60.0%
h3. Issue Summary
The Apache Tomcat version used by the currently available LTS (Long Term Support) releases has a few vulnerabilities, therefore the next LTS release should bundle an updated version of Tomcat.
h3. Steps to Reproduce
Not applicable.
h3. Expected Results
- Not applicable.
h3. Actual Results
- Not applicable.
h3. Note on fix
Tomcat version will be bumped to version [8.5.65|https://tomcat.apache.org/tomcat-8.5-doc/changelog.html]
h3. Workaround
- You can manually upgrade the Apache Tomcat version used by Jira following the procedures outlined in the following article: [How to Upgrade Apache Tomcat version in Jira|https://confluence.atlassian.com/jirakb/how-to-upgrade-apache-tomcat-version-in-jira-7-x-879957866.html].
Related
nessus
nessus
Photon OS 2.0: Apache PHSA-2021-2.0-0328
2021-03-16 00:00:00
Photon OS 3.0: Apache PHSA-2021-3.0-0208
2021-03-22 00:00:00
Debian DSA-4891-1 : tomcat9 - security update
2021-04-15 00:00:00
ibm
ibm
osv
osv
tomcat9 - security update
2021-04-13 00:00:00
tomcat8 - security update
2021-03-15 00:00:00
BIT-tomcat-2021-25122
2024-03-06 11:10:22
atlassian
atlassian
8.5 and 8.13 LTS releases should bundle Tomcat 8.5.63 or higher
2021-04-12 15:50:10
openvas
openvas
Debian: Security Advisory (DSA-4891-1)
2021-04-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1008-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for tomcat (openSUSE-SU-2021:0496-1)
2021-04-16 00:00:00
debian
debian
[SECURITY] [DSA 4891-1] tomcat9 security update
2021-04-13 20:47:05
[SECURITY] [DLA 2596-1] tomcat8 security update
2021-03-16 05:29:03
photon
photon
Important Photon OS Security Update - PHSA-2021-0208
2021-03-17 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0372
2021-03-18 00:00:00
Important Photon OS Security Update - PHSA-2021-0372
2021-03-18 00:00:00
kaspersky
kaspersky
KLA12104 Multiple vulnerabilities in Apache Tomcat
2021-02-02 00:00:00
KLA12105 ACE vulnerability in Apache Tomcat
2021-02-05 00:00:00
suse
suse
Security update for tomcat (important)
2021-04-02 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 8.5.63
2021-02-02 00:00:00
Fixed in Apache Tomcat 9.0.43
2021-02-02 00:00:00
Fixed in Apache Tomcat 10.0.2
2021-02-02 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2021-07-20 13:46:47
redhat
redhat
cve
cve
CVE-2021-25122
2021-03-01 12:15:13
CVE-2021-25329
2021-03-01 12:15:14
ubuntucve
ubuntucve
CVE-2021-25122
2021-03-01 00:00:00
CVE-2021-25329
2021-03-01 00:00:00
debiancve
debiancve
CVE-2021-25122
2021-03-01 12:15:13
CVE-2021-25329
2021-03-01 12:15:14
cgr
cgr
CVE-2021-25329 vulnerabilities
2024-05-19 03:07:16
CVE-2021-25122 vulnerabilities
2024-05-19 03:07:16
prion
prion
Cross site request forgery (csrf)
2021-03-01 12:15:00
Design/Logic Flaw
2021-03-01 12:15:00
redhatcve
redhatcve
CVE-2021-25122
2021-03-02 10:32:54
CVE-2021-25329
2021-03-02 12:32:45
f5
f5
K00174195 : Apache Tomcat vulnerability CVE-2021-25122
2021-03-16 00:00:00
K73648110 : Apache Tomcat vulnerability CVE-2021-25329
2021-03-16 00:00:00
veracode
veracode
Information Disclosure
2021-03-02 03:14:43
Remote Code Execution
2021-03-03 06:05:38
Remote Code Execution (RCE)
2021-03-02 07:51:38
cisa
cisa
Apache Releases Security Advisory for Tomcat
2021-03-02 00:00:00
nvd
nvd
CVE-2021-25122
2021-03-01 12:15:13
CVE-2021-25329
2021-03-01 12:15:14
cvelist
cvelist
CVE-2021-25122 Apache Tomcat h2c request mix-up
2021-03-01 12:00:20
CVE-2021-25329 Incomplete fix for CVE-2020-9484
2021-03-01 12:00:20
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2021-06-16 17:45:29
Potential remote code execution in Apache Tomcat
2021-03-19 20:11:13
amazon
amazon
Important: tomcat8
2021-03-23 23:07:00
Low: tomcat7
2021-04-07 00:18:00
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2022-08-21 00:00:00
attackerkb
attackerkb
CVE-2020-9484 — PersistentManager Java deserialization vulnerability
2020-05-20 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2022-03-31 00:00:00
symantec
symantec
Apache Tomcat Vulnerabilities May 2020 - Mar 2021
2021-03-16 19:59:07
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
Advisory ROSA-SA-2021-1988
2021-07-02 18:17:52
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00