Security News > 2025 > March > Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters: Are You at Risk?

2025-03-19 16:30
By simply sending HTTP requests, attackers can trigger the deserialisation of malicious data in Tomcat's session storage and gain control.
News URL
https://www.techrepublic.com/article/news-apache-tomcat-vulnerability/
Related news
- Critical RCE flaw in Apache Tomcat actively exploited in attacks (source)
- Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution (source)
- Hackers exploit critical unpatched flaw in Zyxel CPE devices (source)
- Don't Overlook These 6 Critical Okta Security Configurations (source)
- 89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals (source)
- Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure (source)
- 'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild' (source)
- Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility (source)