system
Identify the affected product in <CVE-2016-8747>.
user
Which product is affected by <CVE-2016-8747>?
assistant
The affected product is Apache Tomcat and version: 8.5.7 to 8.5.9, 9.0.0.M11 to 9.0.0.M15.