Multiple security risks exist in Apache Tomcat as included with CA Cohesion and products that contain CA Cohesion. These include, but are not limited to, arbitrary command execution. Affected products include CA Cohesion Application Configuration Manager 4.5, CA CMDB Application Server 11.1, and Unicenter Service Desk 11.2.
c8609f8dceb80de59813e4e08c5e56ee0e21604a9ddf888c621eda88cd823b65
Debian Security Advisory 1468-1 - Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
00c5944c63f9dc24a888f255b69eed2106fe3c9afdfc7239c47dd0de4c86bfcf