...
Tomcat (required for the deployment of the Admin Interface, the Archive Server, PI Service and the Database HTTPS Proxy) is installed separately (by the organization). Deltares indicates which version of tomcat is compatible with / required for which version of Delft-FEWS. All security related aspects available in Tomcat can be applied and are under the responsibility of the organization.
For Admin Interface clients / proxies that are exposed to the internet it is crucial that the highest/securest version of Tomcat is used. The highest version most commonly contains security fixes of common vulnerabilities and exposures (CVEs). Any version of Tomcat can (in general) always be made to work with our Admin Interface / HttpProxy / ArchiveServer / PI Service provided that the correct Java version matching the indicated JRE version for the Delft-FEWS release version is used and is compatible with the Tomcat distribution.
...