Security Announcement on Oracle Java SE and Apache Tomcat

​​We will update this announcement with new details as they emerge from our analysis. Please check back periodically.

Last update: 09.11.2026, 09:00 AM CET

Statement on current security announcements

We are currently reviewing the latest reports on critical vulnerabilities affecting Oracle Java SE and Apache Tomcat.

We check which OPTIMAL SYSTEMS components are affected, whether critical vulnerabilities can be exploited, and what actions may be necessary.

Apache Tomcat

The following hotfixes are available for Apache Tomcat to resolve these vulnerabilities.

  • enaio® 12.0: enaio® documentviewer 12.0.0.8

  • enaio® 11.10: enaio® documentviewer 11.10.0.15

  • yuuvis® RAD 10.16: yuuvis_rad_rendition-plus_setup_5.0.14

You can find the hotfixes for enaio® in our Serviceportal via 'Software > Version > Release Info'.

Further hotfixes will follow shortly. Please check back periodically.