25-047 (2025年11月18日)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Directory Server LDAP
1012309* - OpenLDAP SQL Injection Vulnerability (CVE-2022-29155)


Ivanti Endpoint Manager
1012214* - Ivanti Endpoint Manager Multiple SQL Injection Vulnerabilities - 2


JetBrains TeamCity
1012477 - JetBrains TeamCity Cross-Site Scripting Vulnerability (CVE-2025-47851)


Web Client HTTPS
1012220* - Ivanti Endpoint Manager Multiple Directory Traversal Vulnerabilities


Web Server Apache
1012168* - Apache Httpd Server-Side Request Forgery Vulnerability (CVE-2024-38472)


Web Server Miscellaneous
1012111* - Apache JSPWiki Stored Cross-Site Scripting Vulnerability (CVE-2024-27136)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.