Re: Tomcat host header redirect issue

--0000000000002a9db20656b44de8
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Sorry for the confusion..We are using tomcat version 9.0.110

On Thu, 16 Jul, 2026, 11:26 Anushka sur, <[email protected]> wrote:

> Hi everyone,
>
> Thanks for the feedback. You are right =E2=80=94 Tomcat 9.0.110 is very o=
ld, and
> we will treat the upgrade as the first remediation step.
>
> We will check the issue on a newer supported Tomcat release and verify
> whether the redirect problem is still reproducible there. If it is fixed =
by
> the upgrade, we will proceed with the newer version
>
> if not, as suggested by mark thomas we will create virtual host.
>
> Thanks for pointing this out.
>
> Best regards,
> Anushka Sur
>
> On Thu, 16 Jul, 2026, 01:33 Christopher Schultz, <
> [email protected]> wrote:
>
>> Mark,
>>
>> On 7/15/26 9:56 AM, Mark Thomas wrote:
>> > 15 Jul 2026 11:10:41 Anushka sur <[email protected]>:
>> >
>> >> We have identified a VAPT issue in our Oracle APEX application
>> >> deployed on
>> >> ORDS 24.1.11 running on Apache Tomcat 9.0.11.
>> >
>> > That is horribly out of date. You might want to check the list of
>> > published CVEs for 9.0.x
>>
>> +1
>>
>> The real VAPT issue should be "holy @#$%&* your Tomcat version is *how*
>> old?"
>>
>> -chris
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>

--0000000000002a9db20656b44de8--