Apache Tomcat – TheCyberThrone

CISA Adds Four Vulnerabilities to KEV Catalog Aug 6 2026

Four Newly Added KEV Entries Reinforce the Growing Focus on Enterprise Management, AI, Middleware, and DevSecOps Platforms The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited…

PravinKarthik August 6, 2026

CVE-2025-38989 affects Apache Tomcat

CVE-2025-48989 is a Denial-of-Service (DoS) vulnerability in Apache Tomcat, specifically affecting its HTTP/2 implementation. It is classified as an "Improper Resource Shutdown or Release" issue, which leaves Tomcat susceptible to…

PravinKarthik August 19, 2025

CVE-2025-24813 impacts Apache Tomcat

The CVE-2025-24813 vulnerability represents a critical flaw in Apache Tomcat, one of the most widely used open-source web servers and servlet containers. This vulnerability, if exploited, allows for remote code…

PravinKarthik March 18, 2025

Apache Tomcat fixes CVE-2024-50379 and CVE-2024-54677

The Apache Software Foundation has released patches to mitigate two newly discovered vulnerabilities in Apache Tomcat, an extensively used open-source web server and servlet container. These vulnerabilities could potentially jeopardize…

PravinKarthik December 18, 2024

Spring4shell Java RCE ZeroDay in Spring

A zero-day vulnerability was found in the popular Java Web App development framework Spring likely puts a wide variety of Web apps at risk of remote attack. The vulnerability dubbed…

PravinKarthik March 31, 2022