ctrlINT What the industry said about every indicator, with the quote

CVE-2025-24813Vulnerability

Apache Tomcat Path Equivalence Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by GreyNoise · last reported

Last reported 1 month ago

CISA KEVAdded 1 Apr 2025
Fix due 22 Apr 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS99.9%
higher than 99% of CVEsFIRST EPSS, as of 14 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “CVE-2025-24813”

    Recorded FutureVendor
    August 2026 CVE Landscape

  2. “FootPrints has kept a fairly low profile, with minimal CVEs assigned to the product itself; the most recent was in 2014 (CVE-2025-24813 is for Tomcat, don't @ us).”

    watchTowr LabsVendor
    The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)

  3. “GreyNoise Observes Active Exploitation of Critical Apache Tomcat RCE Vulnerability (CVE-2025-24813)”

    GreyNoiseVendor
    GreyNoise Observes Active Exploitation of Critical Apache Tomcat RCE Vulnerability (CVE-2025-24813)

Indicators reported together

named in the same reports

Also named with it: CVE-2025-49113, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2026-33824, CVE-2026-0300, CVE-2026-33017, CVE-2017-0199, CVE-2022-0847, CVE-2026-34486, CVE-2026-39987, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-3055, CVE-2026-12569, CVE-2026-3395, CVE-2025-62593, CVE-2026-72898

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-24813 here?
No account needed. We do not store your IP address.