Apache Tomcat
Latest release 11.0.27 · 147 known vulnerabilities · 7 actively exploited. Vendor advisories
Release lines
| Line | Latest | Status |
|---|---|---|
| 11.0 | 11.0.27 | Supported |
| 10.1 | 10.1.61 | Supported |
| 10.0 | 10.0.27 | End of life since 2022-10-31 |
| 9.0 | 9.0.123 | Supported until 2027-03-31 |
| 8.5 | 8.5.100 | End of life since 2024-03-31 |
| 8.0 | 8.0.53 | End of life since 2018-06-30 |
| 7 | 7.0.109 | End of life since 2021-03-31 |
| 6 | 6.0.53 | End of life since 2016-12-31 |
| 5 | 5.5.36 | End of life since 2012-09-30 |
Actively exploited
- CVE-2026-34486 added to CISA KEV 2026-08-04
- CVE-2025-24813 added to CISA KEV 2025-04-01
- CVE-2023-44487 added to CISA KEV 2023-10-10
- CVE-2016-8735 added to CISA KEV 2023-05-12
- CVE-2017-12615 added to CISA KEV 2022-03-25
- CVE-2017-12617 added to CISA KEV 2022-03-25
- CVE-2020-1938 added to CISA KEV 2022-03-03
Data from 2026-10-24 16:52 UTC.
For AI agents:
Markdown ·
JSON ·
MCP server (https://fixedin.dev/mcp)