Securityboulevard

Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed

First seen 2 Dec 2025, 18:33 UTC • Thecyberexpress

•47.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Apache Software Foundation has disclosed two vulnerabilities affecting Apache Tomcat versions 9, 10, and 11. The more critical vulnerability, CVE-2025-55752, involves a directory traversal flaw that could lead to remote code execution. System administrators are advised to take immediate action to mitigate these risks.

How this analysis works

Attack Flow

Continue Reading

CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws Operation Escaneo Targets Latin American Critical Infrastructure Ivanti Sentry Vulnerabilities Allow Remote Code Execution and Admin Access Spring Framework RCE Vulnerability CVE-2022-22965 Exploited in the Wild SAP Addresses Critical Vulnerabilities in July 2026 Security Updates Broadcom Enhances Spring and Java Security Amid AI Threat Surge

Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading