Impact of CVE-2025-55752/CVE-2025-55754/CVE-2025-61795 on Endpoint Detection and Response

Products

• Endpoint Detection and Response

Issue/Introduction

You want to know if Symantec Endpoint Detection and Response (SEDR) is affected by Apache Tomcat vulnerabilities CVE-2025-55752, CVE-2025-55754 and CVE-2025-61795

Resolution

• EDR is not impacted by these vulnerabilities.
• Apache tomcat 9.0.62-1 is used in latest build of EDR (4.11), and as per Affected Versions details of CVE-2025-55752, CVE-2025-55754 and CVE-2025-61795, the vulnerable Apache versions are from 9.0.108 to 9.0.111.

Additional Information

OPS/MVS 14.0 - OPSMVS REST API Vulnerability (updates Apache Tomcat from 9.0.108 to 9.0.111)