diff --git a/src/content/docs/waf/change-log/2025-06-09.mdx b/src/content/docs/waf/change-log/2025-06-09.mdx new file mode 100644 index 000000000000000..483df7a37196b84 --- /dev/null +++ b/src/content/docs/waf/change-log/2025-06-09.mdx @@ -0,0 +1,83 @@ +--- +title: "2025-06-09" +type: table +pcx_content_type: release-notes +sidebar: + order: 786 +tableOfContents: false +--- + +import { RuleID } from "~/components"; + +This week’s update spotlights four critical vulnerabilities across CMS platforms, VoIP systems, and enterprise applications. Several flaws enable remote code execution or privilege escalation, posing significant enterprise risks. + +**Key Findings** + +- WordPress OttoKit Plugin (CVE-2025-27007): Privilege escalation flaw allows unauthenticated attackers to create or elevate user accounts, compromising WordPress administrative control. +- SAP NetWeaver (CVE-2025-42999): Remote Code Execution vulnerability enables attackers to execute arbitrary code on SAP NetWeaver systems, threatening core ERP and business operations. +- Fortinet FortiVoice (CVE-2025-32756): Buffer error vulnerability may lead to memory corruption and potential code execution, directly impacting enterprise VoIP infrastructure. +- Camaleon CMS (CVE-2024-46986): Remote Code Execution vulnerability allows attackers to gain full control over Camaleon CMS installations, exposing hosted content and underlying servers. + +**Impact** + +These vulnerabilities target widely deployed CMS, ERP, and VoIP systems. RCE flaws in SAP NetWeaver and Camaleon CMS allow full takeover of business-critical applications. Privilege escalation in OttoKit exposes WordPress environments to full administrative compromise. FortiVoice buffer handling issues risk destabilizing or fully compromising enterprise telephony systems. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Managed Ruleset + + 100769WordPress OttoKit Plugin - Privilege Escalation - CVE:CVE-2025-27007LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100770SAP NetWeaver - Remote Code Execution - CVE:CVE-2025-42999LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100779Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + 100780Camaleon CMS - Remote Code Execution - CVE:CVE-2024-46986LogBlockThis is a New Detection
\ No newline at end of file diff --git a/src/content/docs/waf/change-log/scheduled-changes.mdx b/src/content/docs/waf/change-log/scheduled-changes.mdx index 64628e4087c51e0..bfe80433fe7e0d2 100644 --- a/src/content/docs/waf/change-log/scheduled-changes.mdx +++ b/src/content/docs/waf/change-log/scheduled-changes.mdx @@ -25,47 +25,91 @@ import { RSSButton, RuleID } from "~/components"; - 2025-06-02 2025-06-09 + 2025-06-16 Log - 100769 + 100783 - + - WordPress OttoKit Plugin - Privilege Escalation - CVE:CVE-2025-27007 + Cisco IOS XE - Remote Code Execution - CVE:CVE-2025-20188 This is a New Detection - 2025-06-02 2025-06-09 + 2025-06-16 Log - 100770 + 100784 - + - SAP NetWeaver - Remote Code Execution - CVE:CVE-2025-42999 + Axios - SSRF - CVE:CVE-2024-39338 This is a New Detection - 2025-06-02 2025-06-09 + 2025-06-16 Log - 100779 + 100785 - + - Fortinet FortiVoice - Buffer Error - CVE:CVE-2025-32756 + vBulletin - Remote Code Execution - CVE:CVE-2025-48827, CVE:CVE-2025-48828 This is a New Detection - 2025-06-02 2025-06-09 + 2025-06-16 Log - 100780 + 100786 - + - Camaleon CMS - Remote Code Execution - CVE:CVE-2024-46986 + Invision Community - Remote Code Execution - CVE:CVE-2025-47916 + This is a New Detection + + + 2025-06-09 + 2025-06-16 + Log + 100791 + + + + CrushFTP - SSRF - CVE:CVE-2025-32102, CVE:CVE-2025-32103 + This is a New Detection + + + 2025-06-09 + 2025-06-16 + Log + 100792 + + + + Roundcube - Remote Code Execution - CVE:CVE-2025-49113 + This is a New Detection + + + 2025-06-09 + 2025-06-16 + Log + 100793 + + + + XSS - Ontoggle + This is a New Detection + + + 2025-06-09 + 2025-06-16 + Log + 100794 + + + + WordPress WooCommerce Plugin - Dangerous File Upload - CVE:CVE-2025-47577 This is a New Detection diff --git a/src/content/release-notes/waf.yaml b/src/content/release-notes/waf.yaml index db87d950b1cebee..3e59efdcffdce16 100644 --- a/src/content/release-notes/waf.yaml +++ b/src/content/release-notes/waf.yaml @@ -5,11 +5,14 @@ productLink: "/waf/" productArea: Application security productAreaLink: /fundamentals/reference/changelog/security/ entries: - - publish_date: "2025-06-02" - scheduled_date: "2025-06-09" + - publish_date: "2025-06-09" + scheduled_date: "2025-06-16" individual_page: true scheduled: true link: "/waf/change-log/scheduled-changes/" + - publish_date: "2025-06-09" + individual_page: true + link: "/waf/change-log/2025-06-09/" - publish_date: "2025-06-02" individual_page: true link: "/waf/change-log/2025-06-02/"