Skip to main content

Apache Tomcat CVE-2025-48976 and Xerox DocuShare

Updated

Security Advisory: Apache Tomcat CVE-2025-48976 and Xerox DocuShare

Summary:  The DocuShare Tomcat 9.0.120 patch includes the upstream Apache Tomcat CVE-2025-48976 fix. Apply the patch for the installed DocuShare release.

 

Overview

CVE-2025-48976 is an Apache Tomcat security issue included in the Tomcat 9.0.120 upstream fix set. Customers should apply the DocuShare Tomcat 9.0.120 patch for the installed DocuShare release.

Xerox DocuShare uses a bundled Apache Tomcat installation. The Tomcat 9.0.120 patch upgrades the bundled Tomcat from 9.0.106 to 9.0.120 and includes the upstream fixes for the Tomcat advisories listed in this change set.

Resolution

  • Apply the DocuShare Tomcat 9.0.120 patch for the installed DocuShare release.
  • This patch upgrades the bundled Apache Tomcat to version 9.0.120.
  • No application changes are required for standard DocuShare deployments.

Applies To

DocuShare ReleaseAssessment
DocuShare 7.5Addressed by the Tomcat 9.0.120 patch.
DocuShare 7.6Addressed by the Tomcat 9.0.120 patch.
DocuShare 7.7Addressed by the Tomcat 9.0.120 patch.
DocuShare 8.0Addressed by the Tomcat 9.0.120 patch.

 

Important:  If your environment includes custom Tomcat, connector, or TLS changes outside the standard Xerox DocuShare configuration, review those changes with Xerox DocuShare Support before applying the patch.