Apache Tomcat Vulnerability Patch

Products

• VMware Smart Assurance

Issue/Introduction

Need details for when Apache Tomcat Vulnerability Patch will be available for NCM.

Environment

NCM 24.3.9.0

NCM 10.1.X

Cause

Apache Tomcat is running version 9.0.0.M1 which is less than 9.0.98.  

Version 9.0.0.M1 has multiple vulnerabilities.

Resolution

Tomcat vulnerabilities will be addressed in the next NCM release that is scheduled for release for May 2025