Automic Automation and CVE-2025-24813

Products

• CA Automic One Automation
• CA Automic Service Orchestration - Automation Engine
• CA Automic Workload Automation - Automation Engine

Issue/Introduction

This vulnerability affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.

https://nvd.nist.gov/vuln/detail/CVE-2025-24813

Environment

Automic v21.0.x

Automic v24.0.x

Resolution

Per the recommendation from Apache link, upgrade to version 11.0.3, 10.1.35, or 9.0.99, which resolves the vulnerability. 

 

Note: Please contact Apache for further details regarding this issue, as Apache Tomcat is not a Broadcom developed product.  Our compatibility matrix for versions 21.0 and 24.X explains which versions of Tomcat are compatible with Automic Workload Automation.