sohu cachecloud
Published Atomicorp research notes for CVEs affecting sohu cachecloud where WAF protections were observed during testing or engineering review.
These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.
Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.
| CVE | Vulnerability | CVSS | Severity | Rules Observed |
|---|---|---|---|---|
| CVE-2025-15220 | SohuTV CacheCloud LoginController.java init cross site scripting | 2.1 (v4.0) | Low | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15171 | SohuTV CacheCloud ServerController.java index cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15172 | SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15173 | SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15174 | SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15175 | SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15201 | SohuTV CacheCloud WebResourceController.java redirectNoPower cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15219 | SohuTV CacheCloud MachineManageController.java doPodList cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15221 | SohuTV CacheCloud AppDataMigrateController.java index cross site scripting | 2.0 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15145 | SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting | 1.9 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2025-15146 | SohuTV CacheCloud UserManageController.java doUserList cross site scripting | 1.9 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15200 | SohuTV CacheCloud AppClientDataShowController.java doIndex cross site scripting | 1.9 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15202 | SohuTV CacheCloud TaskController.java taskQueueList cross site scripting | 1.9 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |
| CVE-2025-15203 | SohuTV CacheCloud ResourceController.java index cross site scripting | 1.9 (v4.0) | Low | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 |