Some older versions of Apache Tomcat, the company’s open source web server and servlet container, are vulnerable to remote code execution.