216.73.216.86

CVE-2025-48988

· Published 16/06/2025 15:15 · Modified 16/06/2025 20:15

Labels: CVE-2025-48988 2025-06-16CVE-2025-48988CWE-770[email protected]

Essential information

Published
16/06/2025 15:15
Modified
16/06/2025 20:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
apache / tomcat cpe:2.3:a:apache:tomcat:11.0.0-M1:11.0.7:*:*:*:*:*:*
apache / tomcat cpe:2.3:a:apache:tomcat:10.1.0-M1:10.1.41:*:*:*:*:*:*
apache / tomcat cpe:2.3:a:apache:tomcat:9.0.0.M1:9.0.105:*:*:*:*:*:*
apache / tomcat cpe:2.3:a:apache:tomcat:11.0.8:*:*:*:*:*:*:*
apache / tomcat cpe:2.3:a:apache:tomcat:10.1.42:*:*:*:*:*:*:*
apache / tomcat cpe:2.3:a:apache:tomcat:9.0.106:*:*:*:*:*:*:*

References