Severity
Medium
Analysis Summary
CVE-2025-32897 CVSS:9.8
Apache Seata (incubating) could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data.
CVE-2025-54090 CVSS:6.3
Apache HTTP Server could provide weaker than expected security. A bug could result in all "RewriteCond expr ..." tests evaluating as "true".
Impact
- Code Execution
- Security Bypass
Indicators of Compromise
CVE
CVE-2025-32897
CVE-2025-54090
Affected Vendors
Apache
Affected Products
- Apache Seata (incubating) 2.0.0
- Apache HTTP Server 2.4.64
Remediation
Refer to Apache Website for patch, upgrade, or suggested workaround information.