Is our Tomcat susceptible to CVE-2025-24813?
Issue
- Security reports are raising concerns about CVE-2025-24813 for our Tomcat version and requesting we upgrade. Are we truly susceptible?
Environment
- JBoss Web Server
- 5.x
- 6.
- Red Hat Enterprise Linux
- 8.x
- 9.x
- 10.x
- Red Hat Satellite
- Red Hat Identity Management
- Tomcat
- 9.0.x
- 10.1.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.