Is MOVEit Vulnerable to CVE-2025-24813 (Apache Tomcat)?
MOVEit Automation uses Apache Tomcat but it is not vulnerable to CVE-2025-24813, because the default servlet is not enabled. MOVEit Automation will include an upgrade to Apache Tomcat in future versions. MOVEit Transfer and MOVEit Gateway are not affected because they do not use Apache Tomcat.