What version of Tomcat does Atlassian products contain?

[Jorge Suarez]

Given that we are updating our tools for compliance reasons, and that Apache regularly publishes lists of vulnerabilities, is there a central location that shows which version of Tomcat ship with which versions of Atlassian products?  

I know how to find the versions in the products already installed, but it does me no good to upgrade to the latest and greatest to then find out the version of Tomcat is not fixed yet.  I would like a version matrix to decide beforehand.

[Edwin Kyalangalilwa]

Hi @Jorge Suarez,

You can download from Atlassian's website (tar or zip) and in there you can see the version that is shipped with the application version.

For example: Confluence in README.txt

Thank you for downloading Confluence 6.10.1 - Standalone distribution. This distribution comes with a built-in Tomcat 9.0.8 web server and hsql database, so it runs (almost) out the box.