| 114657 | Apache Tomcat 10.1.0-M1 < 10.1.35 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 114656 | Apache Tomcat 11.0.0-M1 < 11.0.3 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 114690 | Apache Tomcat Path Equivalence Remote Code Execution | Web App Scanning | Component Vulnerability | 4/4/2025 | 4/4/2025 | critical |
| 114658 | Apache Tomcat 9.0.0-M1 < 9.0.99 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 421075 | SCA: security update for org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina (GHSA-83qj-6fr2-vhqg) | Tenable Self-Hosted Container Security | SCA Checks | 3/11/2025 | 10/23/2026 | critical |
| 421075 | SCA: security update for org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina (GHSA-83qj-6fr2-vhqg) | Tenable Cloud Security | SCA Checks | 3/11/2025 | 10/23/2026 | critical |
| 232529 | Apache Tomcat 10.1.0.M1 < 10.1.35 | Nessus | Web Servers | 3/10/2025 | 1/21/2026 | critical |
| 233703 | Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-910) | Nessus | Amazon Linux Local Security Checks | 4/1/2025 | 7/16/2026 | critical |
| 233719 | Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2025-911) | Nessus | Amazon Linux Local Security Checks | 4/1/2025 | 7/15/2026 | critical |
| 233814 | Photon OS 5.0: Apache PHSA-2025-5.0-0493 | Nessus | PhotonOS Local Security Checks | 4/3/2025 | 10/14/2026 | critical |
| 234267 | RHEL 8 : tomcat (RHSA-2025:3684) | Nessus | Red Hat Local Security Checks | 4/13/2025 | 6/5/2025 | critical |
| 234618 | Oracle Database Server (April 2025 CPU) | Nessus | Databases | 4/18/2025 | 2/24/2026 | high |
| 234708 | Amazon Linux AMI : tomcat8 (ALAS-2025-1969) | Nessus | Amazon Linux Local Security Checks | 4/22/2025 | 1/21/2026 | critical |
| 236266 | Alibaba Cloud Linux 3 : 0053: tomcat (ALINUX3-SA-2025:0053) | Nessus | Alibaba Cloud Linux Local Security Checks | 5/14/2025 | 5/14/2025 | critical |
| 237820 | RHEL 10 : tomcat9 (RHSA-2025:7494) | Nessus | Red Hat Local Security Checks | 6/5/2025 | 6/5/2025 | critical |
| 240643 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.6) | Nessus | Misc. | 6/26/2025 | 4/19/2026 | high |
| 266637 | RockyLinux 10 : tomcat9 (RLSA-2025:7494) | Nessus | Rocky Linux Local Security Checks | 10/6/2025 | 10/6/2025 | critical |
| 356074 | Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc (crlsa-2025_7494) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/23/2026 | critical |
| 357040 | Rocky Linux 10.0 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_7497) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/23/2026 | critical |
| 352879 | CentOS Linux 6 [TuxCare] Security Update: tomcat6 / tomcat6-admin-webapps / tomcat6-docs-webapp / etc (CENTOS6:CLSA-2025:1755513827) | Nessus | CentOS Local Security Checks | 9/30/2026 | 10/23/2026 | critical |
| 354961 | Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_3683) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/23/2026 | critical |
| 355469 | Rocky Linux 9.6 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ciqsa-2026_1496) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/12/2026 | critical |
| 232530 | Apache Tomcat 11.0.0.M1 < 11.0.3 | Nessus | Web Servers | 3/10/2025 | 1/21/2026 | critical |
| 233841 | SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2025:1126-1) | Nessus | SuSE Local Security Checks | 4/4/2025 | 6/26/2026 | critical |
| 234001 | AlmaLinux 9 : tomcat (ALSA-2025:3645) | Nessus | Alma Linux Local Security Checks | 4/8/2025 | 4/8/2025 | critical |
| 234030 | Oracle Linux 8 : tomcat (ELSA-2025-3683) | Nessus | Oracle Linux Local Security Checks | 4/8/2025 | 1/21/2026 | critical |
| 234052 | RHEL 9 : tomcat (RHSA-2025:3645) | Nessus | Red Hat Local Security Checks | 4/8/2025 | 6/5/2025 | critical |
| 234291 | RHEL 9 : tomcat (RHSA-2025:3646) | Nessus | Red Hat Local Security Checks | 4/13/2025 | 6/5/2025 | critical |
| 237814 | RHEL 10 : tomcat (RHSA-2025:7497) | Nessus | Red Hat Local Security Checks | 6/5/2025 | 6/5/2025 | critical |
| 239291 | TencentOS Server 4: tomcat (TSSA-2025:0224) | Nessus | Tencent Local Security Checks | 6/16/2025 | 11/23/2025 | critical |
| 240536 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3) | Nessus | Misc. | 6/25/2025 | 8/7/2026 | low |
| 242584 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.9) | Nessus | Misc. | 7/22/2025 | 9/1/2025 | critical |
| 354147 | Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_3645) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/23/2026 | critical |
| 355161 | Rocky Linux 8.8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ciqsa-2026_0333) | Nessus | Rocky Linux Local Security Checks | 10/1/2026 | 10/23/2026 | critical |
| 303957 | SUSE SLES12: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:1058-1) | Nessus | SuSE Local Security Checks | 3/27/2026 | 8/7/2026 | critical |
| 233004 | SUSE SLES12: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2025:0954-1) | Nessus | SuSE Local Security Checks | 3/20/2025 | 6/26/2026 | critical |
| 233402 | SUSE SLES15 / openSUSE 15 Security Update : tomcat10 (SUSE-SU-2025:1024-1) | Nessus | SuSE Local Security Checks | 3/27/2025 | 1/21/2026 | critical |
| 233750 | Debian dla-4108 : libtomcat9-embed-java - security update | Nessus | Debian Local Security Checks | 4/2/2025 | 1/21/2026 | critical |
| 233915 | RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.3 (RHSA-2025:3454) | Nessus | Red Hat Local Security Checks | 4/5/2025 | 6/5/2025 | critical |
| 233976 | Oracle Linux 9 : tomcat (ELSA-2025-3645) | Nessus | Oracle Linux Local Security Checks | 4/7/2025 | 1/21/2026 | critical |
| 234285 | RHEL 8 / 9 : Red Hat JBoss Web Server 6.1.0 (RHSA-2025:3608) | Nessus | Red Hat Local Security Checks | 4/13/2025 | 8/15/2025 | high |
| 240927 | Oracle Linux 10 : tomcat9 (ELSA-2025-7494) | Nessus | Oracle Linux Local Security Checks | 6/30/2025 | 1/21/2026 | critical |
| 242243 | Oracle Siebel CRM 25.x < 25.6 (July 2025 CPU) | Nessus | Misc. | 7/17/2025 | 10/30/2025 | critical |
| 242590 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.7) | Nessus | Misc. | 7/22/2025 | 9/1/2025 | critical |
| 255240 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.1.1) | Nessus | Misc. | 8/26/2025 | 4/19/2026 | high |
| 266642 | RockyLinux 10 : tomcat (RLSA-2025:7497) | Nessus | Rocky Linux Local Security Checks | 10/6/2025 | 10/6/2025 | critical |
| 276259 | TencentOS Server 3: tomcat (TSSA-2025:0225) | Nessus | Tencent Local Security Checks | 11/20/2025 | 3/11/2026 | critical |
| 283109 | MiracleLinux 8 : tomcat-9.0.87-1.el8_10.3 (AXSA:2025-9846:02) | Nessus | Miracle Linux Local Security Checks | 1/13/2026 | 1/16/2026 | critical |
| 235792 | Photon OS 4.0: Apache PHSA-2025-4.0-0777 | Nessus | PhotonOS Local Security Checks | 5/13/2025 | 11/2/2026 | critical |
| 282695 | MiracleLinux 9 : tomcat-9.0.87-2.el9_5.1 (AXSA:2025-9840:01) | Nessus | Miracle Linux Local Security Checks | 1/13/2026 | 1/16/2026 | critical |
