PT-2025-12332 · Apache · Apache Tomcat

Published 2025-03-15 · Updated 2025-03-19 · CVE-2004-56337

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 10.1.0 through 10.1.34 Apache Tomcat versions 9.0.0 through 9.0.98

Description The issue concerns security problems that have been fixed in certain Apache Tomcat packages.

Recommendations For Apache Tomcat versions 10.1.0 through 10.1.34, update to version 10.1.35 or later. For Apache Tomcat versions 9.0.0 through 9.0.98, update to version 9.0.99 or later.

Related Identifiers

CVE-2004-56337

MGASA-2025-0105

OPENSUSE-SU-2025:14896-1

OPENSUSE-SU-2025:14897-1

Affected Products

Apache Tomcat

References · 11

• https://osv.dev/vulnerability/MGASA-2025-0105 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14897-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0105.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14896-1 · Vendor Advisory
• https://lists.opensuse.org/archives/list/[e-mail]/thread/7OKLY4MUG7KKGPWMJ2OO7BLP5MD4C3UC · Note
• https://suse.com/security/cve/CVE-2025-24813 · Note
• https://suse.com/security/cve/CVE-2004-56337 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/message/WQRQ6JSFISH4LSDOH7IDJHNYPKMGUF5X · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/WQRQ6JSFISH4LSDOH7IDJHNYPKMGUF5X · Note
• https://suse.com/security/cve/CVE-2024-56337 · Note
• https://bugs.mageia.org/show_bug.cgi?id=34112 · Note