22-060 (December 13, 2022)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

IPSec-IKE
1011628* - Microsoft Windows Internet Key Exchange (IKE) Protocol Extensions Denial of Service Vulnerability (CVE-2022-34720)


Parse Server
1011608* - Parse Server Remote Code Execution Vulnerability (CVE-2022-39396)


Parse Server Client
1011614* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41878)
1011616* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41879)


SolarWinds Information Service
1011631 - SolarWinds Network Performance Monitor Privilege Escalation Vulnerability (CVE-2022-36960)


Splunk Enterprise
1011640 - Splunk Enterprise Cross-Site Scripting Vulnerability (CVE-2022-43568)


Web Application Common
1011619* - XStream Library Remote Command Execution Vulnerability (CVE-2021-39144)


Web Application PHP Based
1011641 - WordPress 'Availability Calendar' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24604)
1011634* - WordPress 'Limit Login Attempts' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24657)
1011638 - WordPress 'Responsive 3D Slider' Plugin SQL Injection Vulnerability (CVE-2021-24398)
1011636 - WordPress 'ThinkTwit' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24582)
1009644 - WordPress 'W3 Total Cache' Plugin Arbitrary File Read Vulnerability (CVE-2019-6715)
1011639 - WordPress 'WP-Board' Plugin SQL Injection Vulnerability (CVE-2021-24404)
1011635 - WordPress 'youForms Free For CopeCart' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24596)


Zoho ManageEngine
1011626* - Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVE-2022-40770)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.