---
title: "Security digest: March 10, 2025"
url: https://erroneo.us/security/2025-03-10/
description: "March 10, 2025 vulnerability digest: 1 brief (Apache Tomcat Partial PUT RCE (CVE-2025-24813)); 5 CISA KEV additions (Advantive, Ivanti); 2 critical…"
type: security-digest-day
section: "Security Digest"
date_published: 2025-03-10
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: March 10, 2025

1 editorial brief, 5 known exploited (cisa kev) additions and 2 critical advisories.

## Take stock

- Most can relax: Apache Tomcat Partial PUT RCE (CVE-2025-24813) . Tomcat deployments where the DefaultServlet has readonly set to false, especially combined with file-based session persistence (PersistentManager + FileStore).
- Do you run any of these? Advantive VeraCore, Ivanti Endpoint Manager (EPM). They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-31.
- Maven: 1 critical advisory ( org.apache.tomcat:tomcat-catalina , org.apache.tomcat.embed:tomcat-embed-core ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- PyPI: 1 critical advisory ( plotai ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Most can relax** [Apache Tomcat Partial PUT RCE (CVE-2025-24813)](https://erroneo.us/security/briefs/apache-tomcat-partial-put-cve-2025-24813/index.md): It is in KEV and attacks were seen within days, but exploitation needs the default servlet's write support turned on, which is off by default and rare; upgrade on your normal cycle and check that one setting.

## Known exploited (CISA KEV)

- [CVE-2025-25181](https://erroneo.us/security/cve/CVE-2025-25181/index.md) Advantive VeraCore:  Advantive VeraCore SQL Injection Vulnerability (CISA due 2025-03-31)
- [CVE-2024-57968](https://erroneo.us/security/cve/CVE-2024-57968/index.md) Advantive VeraCore: Advantive VeraCore Unrestricted File Upload Vulnerability (CISA due 2025-03-31)
- [CVE-2024-13161](https://erroneo.us/security/cve/CVE-2024-13161/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CISA due 2025-03-31)
- [CVE-2024-13160](https://erroneo.us/security/cve/CVE-2024-13160/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CISA due 2025-03-31)
- [CVE-2024-13159](https://erroneo.us/security/cve/CVE-2024-13159/index.md) Ivanti Endpoint Manager (EPM): Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CISA due 2025-03-31)

## Critical advisories

- [CVE-2025-24813](https://erroneo.us/security/cve/CVE-2025-24813/index.md) Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT — Maven org.apache.tomcat:tomcat-catalina >= 11.0.0-M1, < 11.0.3 → 11.0.3; Maven org.apache.tomcat:tomcat-catalina >= 10.1.0-M1, < 10.1.35 → 10.1.35; Maven org.apache.tomcat:tomcat-catalina >= 9.0.0.M1, < 9.0.99 → 9.0.99
- [CVE-2025-1497](https://erroneo.us/security/cve/CVE-2025-1497/index.md) PlotAI eval vulnerability — PyPI plotai < 0.0.7 → 0.0.7

---
Source page: https://erroneo.us/security/2025-03-10/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt