Apache Tomcat: 8.5.100 → 9.0.121
Apache · upgrade impact · Official site ↗
Fixed by upgrading to 9.0.121 iVulnerabilities that affect 8.5.100 but no longer affect 9.0.121 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2025-55752 HIGH EPSS 64% ✓ cleared in 9.0.121 CVE-2025-55754 CRITICAL EPSS 10% ✓ cleared in 9.0.121 CVE-2026-29146 HIGH EPSS 6% ✓ cleared in 9.0.121 CVE-2025-61795 MEDIUM EPSS 1% ✓ cleared in 9.0.121 CVE-2020-8022 HIGH EPSS 1% ✓ cleared in 9.0.121 CVE-2026-65905 CRITICAL EPSS 1% ✓ cleared in 9.0.121 CVE-2026-68763 HIGH EPSS 1% ✓ cleared in 9.0.121 CVE-2026-68525 CRITICAL EPSS 1% ✓ cleared in 9.0.121 CVE-2026-68569 HIGH EPSS 1% ✓ cleared in 9.0.121 CVE-2026-65927 HIGH EPSS 1% ✓ cleared in 9.0.121 CVE-2026-65182 CRITICAL EPSS 0% ✓ cleared in 9.0.121 CVE-2026-66422 HIGH EPSS 0% ✓ cleared in 9.0.121 CVE-2026-55276 CRITICAL EPSS 0% ✓ cleared in 9.0.121 CVE-2026-55955 MEDIUM EPSS 0% ✓ cleared in 9.0.121 CVE-2026-73180 MEDIUM EPSS 0% ✓ cleared in 9.0.121 CVE-2026-55957 HIGH EPSS 0% ✓ cleared in 9.0.121 CVE-2026-53404 HIGH EPSS 0% ✓ cleared in 9.0.121 CVE-2026-55956 MEDIUM EPSS 0% ✓ cleared in 9.0.121 CVE-2026-50229 MEDIUM EPSS 0% ✓ cleared in 9.0.121 CVE-2026-59084 CRITICAL EPSS 0% ✓ cleared in 9.0.121 CVE-2026-59083 CRITICAL EPSS 0% ✓ cleared in 9.0.121