21-022 (May 11, 2021)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Netatalk DSI
1010921* - Netatalk Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2018-1160)


Web Application Common
1010918* - Nagios XI Remote Code Execution Vulnerability (CVE-2020-35578)
1010942 - WordPress XML External Entity Injection Vulnerability (CVE-2021-29447)


Web Application PHP Based
1010931* - GetSimple CMS Cross Site Scripting Vulnerability (CVE-2020-23839)
1010642 - WordPress XMLRPC Brute Force Amplification Attack


Web Client Common
1010940 - XStream Library Regular Expression Denial Of Service Vulnerability (CVE-2021-21348)


Web Client Internet Explorer/Edge
1010946 - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2021-26419)


Web Server Common
1010944 - Apache Druid Remote Code Execution Vulnerability (CVE-2021-25646) - 1
1010890* - HPE Systems Insight Manager AMF Deserialization of Untrusted Data Vulnerability (CVE-2020-7200)
1010949 - Microsoft Windows HTTP Protocol Stack Remote Code Execution Vulnerability (CVE-2021-31166)


Web Server HTTPS
1010935 - Joomla! CMS Stored Cross-Site Scripting Vulnerability (CVE-2021-26030)
1010948 - Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-28482)


Web Server Miscellaneous
1010670* - Apache Struts2 Remote Code Execution Vulnerability (CVE-2020-17530)


Web Server Nagios
1010943 - Nagios XI Authenticated OS Command Argument Injection Vulnerability (CVE-2020-5792)


Web Server Oracle
1010926* - Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Vulnerability (CVE-2021-2211)


Web Server SharePoint
1010947 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2021-31181)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.