Impact of Apache Tomcat related vulnerabilities on Endpoint Protection Manager

Products

• Endpoint Protection

Issue/Introduction

You want to know the impact of following Apache Tomcat related vulnerabilities on Symantec Endpoint Protection Manager (SEPM):

• CVE-2024-23672
• CVE-2024-24549
• CVE-2026-43513
• CVE-2026-41284
• CVE-2026-41293
• CVE-2026-43514
• CVE-2026-42498
• CVE-2026-53404 
• CVE-2026-53434
• CVE-2026-55276

Environment

SEPM 14.3 RU9/10, 14.4

Resolution

• CVE-2024-23672/CVE-2024-24549: No Impact, SEPM is not vulnerable.
  
  
• CVE-2026-43513/CVE-2026-41284/CVE-2026-41293/CVE-2026-43514/CVE-2026-42498: No impact
  Although the SEPM uses the impacted version (Apache Tomcat 9.0.98), it does not use the affected functionality.
  
  
• CVE-2026-53404: No impact
  
  
• CVE-2026-53434: No impact
  
  
• CVE-2026-55276: No impact