What version of Tomcat is bundled with JIRA 6.4?

[Bob Hansen]

We are trying to avoid security vulnerabilities such as CVE-2014-7810 which means we need to know which version of Tomcat is bundled with the different versions of JIRA. Where do we go to find this information? I can't be the only one looking for this.

[Taha Khanzada · Accepted solution]

Hi Bob,

As per Supported Platform page for JIRA 6.4 it must be Apache Tomcat 7.0.55

https://confluence.atlassian.com/jira/supported-platforms-207488170.html

Taha

[MattS]

I'd recommend using the command line or System Info in general since the info on that page might be changed

[David Di Blasio]

Hi Bob, 

The bundled version can also be found by looking in System Information as well. I put together the following quick article on how to find this information as well. 

https://confluence.atlassian.com/display/JIRAKB/Finding+the+Bundled+Tomcat+Version+Per+JIRA+Release

[MattS]

I found https://confluence.atlassian.com/display/CONFKB/How+to+determine+your+version+of+Tomcat+and+Java and it works for JIRA too, at the command line

[Bob Hansen]

These two links do not help me because I do not have JIRA installed. We are trying to decide whether or not we want to use JIRA. Given that Tomcat is out-of-date and difficult to patch, it looks bleak for us. We require a secure environment with access to patches.