Re: Tomcat host header redirect issue

Christopher Schultz <[email protected]> Wed, 15 Jul 2026 16:02:48 -0400
Newsgroups gmane.comp.jakarta.tomcat.user
Message-ID <[email protected]>
Mark,

On 7/15/26 9:56 AM, Mark Thomas wrote:
> 15 Jul 2026 11:10:41 Anushka sur <[email protected]>:
> 
>> We have identified a VAPT issue in our Oracle APEX application 
>> deployed on
>> ORDS 24.1.11 running on Apache Tomcat 9.0.11.
> 
> That is horribly out of date. You might want to check the list of 
> published CVEs for 9.0.x

+1

The real VAPT issue should be "holy @#$%&* your Tomcat version is *how* 
old?"

-chris