Apache Tomcat is prone to a remote code-execution vulnerability.
Apache Tomcat 9.0.0.M1 to 9.0.0.M11.
Apache Tomcat 8.5.0 to 8.5.6.
Apache Tomcat 8.0.0.RC1 to 8.0.38.
Apache Tomcat 7.0.0 to 7.0.72.
Apache Tomcat 6.0.0 to 6.0.47.