22-031 (June 28, 2022)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Atlassian Bitbucket
1011432* - Atlassian Bitbucket Data Center Server Java Deserialization Vulnerability (CVE-2022-26133)


CentOS Web Panel
1011448* - CentOS Web Panel Multiple Command Injection Vulnerabilities


DCERPC Services
1003222* - Block Administrative Share
1009490* - Block Administrative Share - 1 (ATT&CK T1021.002)


Web Application Common
1011468 - Horde Groupware Webmail Insecure Deserialization Vulnerability (CVE-2022-30287)
1011471 - VanDyke VShell Server Command Injection Vulnerability (CVE-2022-28054)


Web Application PHP Based
1011426* - WordPress 'Blue Admin' Plugin Cross-Site Request Forgery Vulnerability (CVE-2021-24581)
1011465 - WordPress 'Google Tag Manager for WordPress' Plugin Reflected Cross-Site Scripting Vulnerability (CVE-2022-1707)
1011467 - WordPress 'ReDi Restaurant Reservation' Plugin Stored Cross-Site Scripting Vulnerability (CVE-2021-24299)
1011446* - WordPress 'Responsive Menu' Plugin Authenticated Arbitrary File Upload Vulnerability (CVE-2021-24160)


Web Client Common
1011469 - Foxit PDF Reader And Editor Use After Free Vulnerability (CVE-2021-34847)


Web Server Common
1011466 - Apache HTTP Server 'mod_sed' Denial Of Service Vulnerability (CVE-2022-30522)
1010175* - Cross-Site Scripting (XSS) Decoder


Zoho ManageEngine ServiceDesk Plus_MSP
1011317* - Zoho ManageEngine ServiceDesk Plus Stored Cross-Site Scripting Vulnerability (CVE-2021-46065)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

1011241* - Apache Log4j Remote Code Execution Vulnerability (CVE-2021-44228)