diff --git a/src/content/changelog/waf/2025-10-20-waf-release.mdx b/src/content/changelog/waf/2025-10-20-waf-release.mdx new file mode 100644 index 000000000000000..b566732da2e8dad --- /dev/null +++ b/src/content/changelog/waf/2025-10-20-waf-release.mdx @@ -0,0 +1,66 @@ +--- +title: "WAF Release - 2025-10-20" +description: Cloudflare WAF managed rulesets 2025-10-20 release +date: 2025-10-20 +--- + +import { RuleID } from "~/components"; + +This week’s update introduces an enhanced rule that expands detection coverage for a critical vulnerability in Oracle E-Business Suite. It also improves an existing rule to provide more reliable coverage in request processing. + +**Key Findings** + +New WAF rule deployed for Oracle E-Business Suite (CVE-2025-61882) to block unauthenticated attacker's network access via HTTP to compromise Oracle Concurrent Processing. If successfully exploited, this vulnerability may result in remote code execution. + +**Impact** + +- Successful exploitation of CVE-2025-61882 allows unauthenticated attackers to execute arbitrary code remotely by chaining multiple weaknesses, enabling lateral movement into internal services, data exfiltration, and large-scale extortionware deployment within Oracle E-Business Suite environments. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments
Cloudflare Managed Ruleset + + 100598ARemote Code Execution - Common Bash Bypass - BetaLogBlockThis rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: )
Cloudflare Managed Ruleset + + 100916AOracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2LogBlockThis is a New Detection
Cloudflare Managed Ruleset + + N/AHTTP TruncatedN/ADisabledThis is a New Detection
\ No newline at end of file diff --git a/src/content/changelog/waf/scheduled-waf-release.mdx b/src/content/changelog/waf/scheduled-waf-release.mdx index cb5a25f26853678..db49e37c28030f2 100644 --- a/src/content/changelog/waf/scheduled-waf-release.mdx +++ b/src/content/changelog/waf/scheduled-waf-release.mdx @@ -1,46 +1,7 @@ --- -title: WAF Release - Scheduled changes for 2025-10-20 -description: WAF managed ruleset changes scheduled for 2025-10-20 -date: 2025-10-13 +title: WAF Release - Scheduled changes for 2025-10-27 +description: WAF managed ruleset changes scheduled for 2025-10-27 +date: 2025-10-20 scheduled: true ---- - -import { RuleID } from "~/components"; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Announcement DateRelease DateRelease BehaviorLegacy Rule IDRule IDDescriptionComments
2025-10-132025-10-20Log100598A - - Remote Code Execution - Common Bash Bypass - BetaThis rule is merged into the original rule "Remote Code Execution - Common Bash Bypass" (ID: )
2025-10-132025-10-20Log100916A - - Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2This is a New Detection
\ No newline at end of file +hidden: true +--- \ No newline at end of file