The CA Access Gateway server 12.8.05 is using Tomcat versions with known security vulnerability CVE-2021-30640(https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.46), rated as low.
Release : 12.8.05
Component : Access Gateway
Tomcat vulnerability CVE-2021-30640 is fixed in version 9.0.52
Please raise a support ticket to obtain this binary until this is made available for download.