RHSA-2025:14177

Advisory lineage Upstream: 7 Downstream: 0
Published: 21 Aug 2025, 10:03
Last modified:01 May 2026, 10:17

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Aug 2025, 10:03
Published
Vulnerability first disclosed
01 May 2026, 10:17
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: tomcat security update

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Systems

  • redhat•tomcat

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-admin-webapps

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-docs-webapp

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-el-3.0-api

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-jsp-2.3-api

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-lib

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-servlet-4.0-api

    < 1:9.0.87-1.el8_10.6

  • redhat•tomcat-webapps

    < 1:9.0.87-1.el8_10.6

References (40)