Apache Tomcat 7.0.109 End of life
This release line no longer gets security fixes.
Upgrade to 9.0.123
The lowest fixed release that is still supported.
- Known vulnerabilities
- 28 (8 critical, 13 high)
- End of life
- Yes, since 2021-03-31
- Data as of
- 2026-10-24 23:07 UTC
Vulnerabilities
- CVE-2026-76183 critical
- CVE-2026-65905 critical
- CVE-2026-43512 critical
- CVE-2026-68525 critical
- CVE-2026-65182 critical
- CVE-2026-59084 critical
- CVE-2026-43515 critical
- CVE-2026-101296 critical
- CVE-2024-38286 high
- CVE-2025-49124 high
And 18 more with lower severity.
- 9 Apache Tomcat vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.