9.0.15

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-15	CVE-2019-0232	OS Command Injection vulnerability in Apache Tomcat When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. network high complexity apache CWE-78	8.1