Is Apache Tomcat 5.5.36 patched?

Apache · cycle 5.5 · Official site ↗

5.5.366/100Critical · exploited

Current stable (11.0.27): 100/100

Minimum safe version9.0.121

5.5.36 has 5 open critical-or-high vulnerabilities. Run 9.0.121 or later to clear them. See what 9.0.121 fixes →

Health score6/100

Open issues16

Exploited now1

Cycle 5.5 EOL—

Latest release11.0.27

Summary iPlain-English security status for Apache Tomcat 5.5.36, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Apache Tomcat 5.5.36 is part of the 5.5 release line. 1 actively-exploited vulnerability affects it (CISA KEV). The minimum safe version is 9.0.121 — upgrade to it or later to clear the open critical/high issues. The latest supported Apache Tomcat release is 11.0.27.

Known issues affecting 5.5.36

Exploited first, then by exploitation probability.

CVE-2016-8735 CRITICAL exploited EPSS 90% → fixed in 8.5.7 CVE-2014-0075 MEDIUM EPSS 20% → see advisory CVE-2013-4286 MEDIUM EPSS 17% → see advisory CVE-2013-4444 MEDIUM EPSS 14% → see advisory CVE-2013-4590 MEDIUM EPSS 9% → see advisory CVE-2013-4322 MEDIUM EPSS 9% → see advisory CVE-2014-0099 MEDIUM EPSS 9% → see advisory CVE-2014-0119 MEDIUM EPSS 8% → see advisory CVE-2014-0096 MEDIUM EPSS 7% → see advisory CVE-2020-8022 HIGH EPSS 1% → fixed in 9.0.35-3.57.3 CVE-2026-55276 CRITICAL EPSS 0% → fixed in 11.0.23 CVE-2026-55955 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-55957 HIGH EPSS 0% → fixed in 11.0.5 CVE-2026-55956 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-50229 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-59083 CRITICAL EPSS 0% → see advisory

Other Apache Tomcat versions

Check another release line of Apache Tomcat.

Apache Tomcat 11.0.27 Apache Tomcat 10.1.61 Apache Tomcat 10.0.27 Apache Tomcat 9.0.123 Apache Tomcat 8.5.100 Apache Tomcat 8.0.53 Apache Tomcat 7.0.109 Apache Tomcat 6.0.53

Frequently asked

Is Apache Tomcat 5.5.36 patched?

No — 1 actively-exploited vulnerability affects Apache Tomcat 5.5.36. Upgrade to at least 9.0.121.

What version should I upgrade Apache Tomcat 5.5.36 to?

Upgrade Apache Tomcat 5.5.36 to at least 9.0.121 to clear its 5 open critical-or-high vulnerabilities.

What is the latest version of Apache Tomcat?

The latest supported Apache Tomcat release is 11.0.27.

Is Apache Tomcat 5.5.36 still receiving security updates?

Yes — the 5.5 line is still supported and receiving security updates. The latest release is 11.0.27.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade — Apache Tomcat official site ↗