On June 11, 2025, major software vendors including Adobe, Fortinet, Ivanti, Microsoft, and SAP released their monthly security updates as part of Patch Tuesday. Below is a summary of essential security updates, particularly focusing on key vulnerabilities that require immediate attention.
Vulnerabilities Identified
Adobe:
- CVE-2025-47110 affects Adobe Commerce, marking a critical vulnerability that administrators should address quickly to ensure system security.
Fortinet:
- CVE-2025-22252 impacts Fortinet’s Fortios, Fortiproxy, and Fortiswitchmanager. It’s crucial for users of these products to apply the latest patches to fend off potential attacks.
Ivanti:
- The vulnerabilities CVE-2025-5353 and CVE-2025-22455 pertain to Workspace Control, emphasizing the importance of timely updates for those using Ivanti’s services.
Microsoft:
- Two notable vulnerabilities were reported:
- CVE-2025-33053 in Microsoft WebDav, which could be exploited if not patched quickly.
- CVE-2025-33073, concerning Microsoft Windows SMB, which is vital for secure file sharing and networking functions.
SAP:
- CVE-2025-42989 affects the SAP Netweaver Application Server for ABAP, further emphasizing the need for immediate updates in enterprise environments using SAP solutions.
Products Affected
For a detailed list of affected products, refer to the specific vendor links provided in their security updates.
Recommendations
The Computer Emergency Response Team for Sweden (CERT-SE) advises all organizations and individuals using these products to install the security updates provided by the respective vendors as soon as possible. Following the vendor’s guidelines is crucial to mitigate security threats effectively.
Resources for Updates
- Adobe Security Updates: Adobe Security
- Fortinet Updates: Fortiguard
- Ivanti Blog: Ivanti June Security Update
- Microsoft Update Guide: Microsoft Release Notes
- SAP Security Notes: SAP Support
Conclusion
Patch Tuesday is a vital reminder for IT administrators to prioritize cybersecurity by applying updates promptly. Regular monitoring of vendor communications about vulnerabilities is essential for maintaining the integrity and safety of software environments. Stakeholders should act immediately on the provided updates to close security gaps and prevent exploitation by cyber threats.