Impact of "Apache Tomcat" vulnerabilities on our products

 
The following "Apache Tomcat" vulnerability has been disclosed.

For details on the vulnerability and its impact, please refer to The Apache Software Foundation.
・CVE-2026-101356
 https://lists.apache.org/thread/d1xjt7bbjqw7y7n5mcb4fm815hpfgc27

・CVE-2026-101296
 https://lists.apache.org/thread/bl52b9go9ckoov8x4v3dt6rkm573cygd

・CVE-2026-103119
 https://lists.apache.org/thread/sk2cg4k077fwcqbm6tqz2n700nq06h80

・CVE-2026-93446
 https://lists.apache.org/thread/zh87okr5qspv4byzfpy2w6dqrokrnxzw

・CVE-2026-88041
 https://lists.apache.org/thread/dnmm9l3byytg3l66nk1jrqfrl7jty7n1

・CVE-2026-74049
 https://lists.apache.org/thread/lolc9wo4tzjog2tnwctv93hz9gjcdnc6

・CVE-2026-74048
 https://lists.apache.org/thread/v5ry0sx1c7x1wr5mx4cddj3p3mv1ho6m

・CVE-2026-80353
 https://lists.apache.org/thread/tr0q87qwvs80p9hc53tkwpzvnx0ywftr


* Target Products

If you are running a system that calls the following products from Tomcat

・IM-PDFAutoConverter for AccelPlatform
・IM-PDFCoordinator for AccelPlatform
・IM-PDFDesigner for AccelPlatform
・IM-PDFDesigner FullPack for AccelPlatform
・IM-PDFDirectPrint for AccelPlatform 
・IM-PDFTimeStamper for AccelPlatform
・IM-ContentsSearch for AccelPlatform (when using Tomcat in 2020 Winter or earlier)
・IM-SecureSignOn for AccelPlatform (when using Tomcat for LoginServer)



* Affected areas

○CVE-2026-93446
- If you are using TLS 1.3, the post-communication process may not complete properly, 
and some subsequent connections may fail.

○CVE-2026-74048
- If FIPS mode (a mode that uses only strong encryption methods) is enforced but fails to activate, 
the system may not shut down safely and may unintentionally start up using a weak encryption method.
 

* How to respond

- If you are using the Apache Tomcat Ver.9, please upgrade to ver.9.0.123.

* For customers considering upgrading to Tomcat Ver.10
Upgrading to Tomcat Ver.10 will cause the current modules to stop working.
A module compatible with Tomcat 10 is scheduled to be released on October 30, 2026.

If you wish to upgrade to Tomcat Ver.10, please apply the module first and then migration to Tomcat Ver.10.


-- Target --------------------------------------------------------------------------------
iAP/Accel Extensions/IM-PDFDesigner/All Updates
iAP/Accel Extensions/IM-PDFAutoConverter/All Updates
iAP/Accel Extensions/IM-PDFCoordinator/All Updates
iAP/Accel Extensions/IM-PDFDirectPrint/All Updates
iAP/Accel Extensions/IM-PDFTimeStamper/All Updates
iAP/Accel Extensions/IM-ContentsSearch for  Accel Platform/2020 Winter or earlier
iAP/Accel Applications/IM-SecureSignOn for  Accel Platform/All Updates
--------------------------------------------------------------------------------

FAQID:1503
Was this article helpful?
0 out of 0 found this helpful
Powered by Zendesk