Apache Tomcat 安全漏洞

🗓️ 27 Oct 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 7 Views

Tomcat path traversal via rewrite rules may bypass security and enable remote code execution in affected versions.

Reporter	Title	Published	Views	Family All 281
ibm	Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities	6 Jul 202613:46	–	ibm
ibm	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	24 Mar 202613:26	–	ibm
ibm	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	9 Dec 202515:01	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 3.4	23 Apr 202612:28	–	ibm
ibm	Security Bulletin: Vulnerabilities in tomcat affects IBM Netezza Appliance	3 Jun 202610:39	–	ibm
ibm	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by multiple Apache Tomcat vulnerabilities (CVE-2025-55752, CVE-2025-61795)	12 Dec 202520:44	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a directory traversal, security bypass, and D.O.S. in Apache Tomcat (CVE-2025-55752, CVE-2025-55754, CVE-2025-61795)	27 Feb 202615:33	–	ibm
ibm	Security Bulletin: Vulnerabilities in Apache Tomcat and hoek might affect IBM Storage Defender Copy Data Management	10 Apr 202614:40	–	ibm
ibm	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat( CVE-2025-55752,CVE-2025-55754 & CVE-2025-61795)	18 Nov 202515:30	–	ibm

Source	Link
lists	www.lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog

25 May 2026 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.5

EPSS0.66535

SSVC

tomcat path traversal rewrite rules remote code execution affected versions