Wanted to confirm, we have a service release in progress that includes many security-oriented changes/fixes. The tomcat versions in that release are: 6.0.41 (console) and 6.0.37 (database/reports access). We have ran nessus scans that come up clean, but not sure about other scanners, since as you said they could be only checking versions.
↧