Synced 14 Oct 2026 20:54 UTC Account

Is Apache Tomcat 8.0.53 patched?

Apache · cycle 8.0 · end of life · Official site ↗
8.0.5340/100End of life

Current stable (11.0.27): 100/100

Minimum safe version9.0.121

8.0.53 has 3 open critical-or-high vulnerabilities. Run 9.0.121 or later to clear them. See what 9.0.121 fixes →

Health score40/100
Open issues5
Exploited now0
Cycle 8.0 EOL2018-06-30
Latest release11.0.27

Summary iPlain-English security status for Apache Tomcat 8.0.53, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Apache Tomcat 8.0.53 is part of the 8.0 release line. 5 known vulnerabilities affect it. The minimum safe version is 9.0.121 — upgrade to it or later to clear the open critical/high issues. The 8.0 line reached end-of-life on 2018-06-30, so it no longer receives security patches. The latest supported Apache Tomcat release is 11.0.27.

Known issues affecting 8.0.53

Exploited first, then by exploitation probability.

CVE-2020-8022 HIGH EPSS 1% → fixed in 9.0.35-3.57.3 CVE-2026-55276 CRITICAL EPSS 0% → fixed in 11.0.23 CVE-2026-55955 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-55957 HIGH EPSS 0% → fixed in 11.0.5 CVE-2026-55956 MEDIUM EPSS 0% → fixed in 11.0.23

Other Apache Tomcat versions

Check another release line of Apache Tomcat.

Apache Tomcat 11.0.27Apache Tomcat 10.1.61Apache Tomcat 10.0.27Apache Tomcat 9.0.123Apache Tomcat 8.5.100Apache Tomcat 7.0.109Apache Tomcat 6.0.53Apache Tomcat 5.5.36

Frequently asked

Is Apache Tomcat 8.0.53 patched?

Apache Tomcat 8.0.53 is end-of-life and no longer receives security patches. Move to 11.0.27.

What version should I upgrade Apache Tomcat 8.0.53 to?

Upgrade Apache Tomcat 8.0.53 to at least 9.0.121 to clear its 3 open critical-or-high vulnerabilities.

When does Apache Tomcat 8.0 reach end-of-life?

Apache Tomcat 8.0 reached end-of-life on 2018-06-30 and no longer receives security patches.

What is the latest version of Apache Tomcat?

The latest supported Apache Tomcat release is 11.0.27.

Is Apache Tomcat 8.0.53 still receiving security updates?

No — Apache Tomcat 8.0.53 is on the 8.0 line, which reached end-of-life on 2018-06-30 and no longer receives security updates. Upgrade to 11.0.27 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade — Apache Tomcat official site ↗