Common Vulnerabilities & Exposures (CVE) Survival Guide

In 2 years Tomitribe support has patched over 80 CVEs on Apache Tomcat, TomEE & ActiveMQ.

Our teams work together to make surviving the frequency of CVEs possible.

CVEs are not black and white. Knowledge of both the app and server is required to truly determine risk and appropriate reaction.


Sonatype Nexus Lifecycle

Sonatype & Tomitribe:  Working Together

Vulnerability Playbook


365 days a year we automatically scan your exact versions of Tomcat, TomEE or ActiveMQ


Vulnerabilities receive immediate attention from our support team


Support tickets are created on your behalf in our portal


We work collaboratively to help determine if your application is affected


Backed by our support team, you react appropriately & own risk confidently


The Tomitribe Support team immediately begins work on a patch for your version


New binaries are posted to your open ticket and can be rolled out immediately

Open Source

Patches are contributed back to the community for any active branches still under development
Scanned for Vulnerabilities lately?   

Contact us & see how we can help. 

* These fields are required.