This is a vulnerability identified on an operating system (e.g., Windows Server 2008) or a service (e.g., Apache Tomcat) when the specific version of the system or service is no longer supported. Consequently, the system will no longer receive security patches. It is therefore necessary to upgrade the system or service to a version actively maintained by the vendor.