Skip to content

Commit 933daa3

Browse files
authored
Add change log about emergency waf release on Oct 30
Add 2025-10-30-emergency-waf-release.mdx
1 parent 976e08e commit 933daa3

File tree

1 file changed

+44
-0
lines changed

1 file changed

+44
-0
lines changed
Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
---
2+
title: "WAF Release - 2025-10-30 - Emergency"
3+
description: Cloudflare WAF managed rulesets 2025-10-30 emergency release
4+
date: 2025-10-30
5+
---
6+
7+
import { RuleID } from "~/components";
8+
9+
This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Oracle E-Business Suite, tracked as CVE-2025-61884.
10+
11+
**Key Findings**
12+
13+
The flaw is easily exploitable and allows an unauthenticated attacker with network access to compromise Oracle Configurator, , which can grant access to sensitive resources and configuration data. The affected versions include 12.2.3 through 12.2.14.
14+
15+
**Impact**
16+
17+
Successful exploitation of CVE-2025-61884 may result in unauthorized access to critical business data or full exposure of information accessible through Oracle Configurator. Administrators are strongly advised to apply vendor's patches and recommended mitigations to reduce this exposure.
18+
19+
<table style="width: 100%">
20+
<thead>
21+
<tr>
22+
<th>Ruleset</th>
23+
<th>Rule ID</th>
24+
<th>Legacy Rule ID</th>
25+
<th>Description</th>
26+
<th>Previous Action</th>
27+
<th>New Action</th>
28+
<th>Comments</th>
29+
</tr>
30+
</thead>
31+
<tbody>
32+
<tr>
33+
<td>Cloudflare Managed Ruleset</td>
34+
<td>
35+
<RuleID id="2749f13f8cb34a3dbd49c8c48827402f" />
36+
</td>
37+
<td>N/A</td>
38+
<td>Oracle E-Business Suite - SSRF - CVE:CVE-2025-61884</td>
39+
<td>N/A</td>
40+
<td>Block</td>
41+
<td>This is a New Detection</td>
42+
</tr>
43+
</tbody>
44+
</table>

0 commit comments

Comments
 (0)