Hi everyone, Thanks for the feedback. You are right — Tomcat 9.0.110 is very old, and we will treat the upgrade as the first remediation step.
We will check the issue on a newer supported Tomcat release and verify whether the redirect problem is still reproducible there. If it is fixed by the upgrade, we will proceed with the newer version if not, as suggested by mark thomas we will create virtual host. Thanks for pointing this out. Best regards, Anushka Sur On Thu, 16 Jul, 2026, 01:33 Christopher Schultz, < [email protected]> wrote: > Mark, > > On 7/15/26 9:56 AM, Mark Thomas wrote: > > 15 Jul 2026 11:10:41 Anushka sur <[email protected]>: > > > >> We have identified a VAPT issue in our Oracle APEX application > >> deployed on > >> ORDS 24.1.11 running on Apache Tomcat 9.0.11. > > > > That is horribly out of date. You might want to check the list of > > published CVEs for 9.0.x > > +1 > > The real VAPT issue should be "holy @#$%&* your Tomcat version is *how* > old?" > > -chris > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
