The Apache Software Foundation has rolled out security updates for the Tomcat application server that address several flaws. Tomcat is an open-source Java Servlet Container that implements several Java EE specifications. The US-CERT has released a security alert that urges users to apply security updates. The vulnerabilities are less likely to be exploited in the wild, both of which could lead to arbitrary code execution. The latest Tomcat 7.0.0, 8.0 to 8.5.0.”]
Source: https://securityaffairs.co/wordpress/74727/hacking/apache-tomcat-flaws.html