The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2725 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

    * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible     RCE (CVE-2025-55752)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991023 advisory.

    Relative Path Traversal vulnerability in Apache Tomcat.

    The fix for bug 60013 introduced a regression where the       rewritten URL was normalized before it was     decoded. This introduced the       possibility that, for rewrite rules that rewrite query parameters to     the       URL, an attacker could manipulate the request URI to bypass security       constraints including     the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could     be uploaded leading to remote code execution. PUT requests are normally limited to trusted users and it is     considered unlikely that PUT requests would be enabled in conjunction with a rewrite that manipulated the     URI.



    This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from     9.0.0.M11 through 9.0.108.

    The following versions were EOL at the time the CVE was created but are     known to be affected: 8.5.6 though 8.5.100. Other, older, EOL versions may also be affected.
    Users are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which     fix the issue.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991299 advisory.

    Relative Path Traversal vulnerability in Apache Tomcat.

    The fix for bug 60013 introduced a regression where the       rewritten URL was normalized before it was     decoded. This introduced the       possibility that, for rewrite rules that rewrite query parameters to     the       URL, an attacker could manipulate the request URI to bypass security       constraints including     the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could     be uploaded leading to remote code execution. PUT requests are normally limited to trusted users and it is     considered unlikely that PUT requests would be enabled in conjunction with a rewrite that manipulated the     URI.



    This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from     9.0.0.M11 through 9.0.108.

    The following versions were EOL at the time the CVE was created but are     known to be affected: 8.5.6 though 8.5.100. Other, older, EOL versions may also be affected.
    Users are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which     fix the issue.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23048 advisory.

    * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

    * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible     RCE (CVE-2025-55752)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23050 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

    Security Fix(es):

    * tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

    * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service (CVE-2025-61795)

    * tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible     RCE (CVE-2025-55752)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23048 advisory.

    - Resolves: RHEL-124507       tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
299158	RHEL 8 : pki-deps:10.6 (RHSA-2026:2725)	Nessus	Red Hat Local Security Checks	2/16/2026	2/16/2026	high
276986	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-991023)	Nessus	Unity Linux Local Security Checks	12/2/2025	12/2/2025	high
279465	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-991299)	Nessus	Unity Linux Local Security Checks	12/20/2025	12/20/2025	high
278618	RockyLinux 8 : tomcat (RLSA-2025:23048)	Nessus	Rocky Linux Local Security Checks	12/13/2025	12/13/2025	high
278148	RHEL 10 : tomcat (RHSA-2025:23050)	Nessus	Red Hat Local Security Checks	12/10/2025	12/10/2025	high
278174	Oracle Linux 8 : tomcat (ELSA-2025-23048)	Nessus	Oracle Linux Local Security Checks	12/11/2025	3/3/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high