![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
Rule Update
21-022 (2021年5月11日)
2021年5月11日
概要
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Netatalk DSI
1010921* - Netatalk Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2018-1160)
Web Application Common
1010918* - Nagios XI Remote Code Execution Vulnerability (CVE-2020-35578)
1010942 - WordPress XML External Entity Injection Vulnerability (CVE-2021-29447)
Web Application PHP Based
1010931* - GetSimple CMS Cross Site Scripting Vulnerability (CVE-2020-23839)
1010642 - WordPress XMLRPC Brute Force Amplification Attack
Web Client Common
1010940 - XStream Library Regular Expression Denial Of Service Vulnerability (CVE-2021-21348)
Web Client Internet Explorer/Edge
1010946 - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2021-26419)
Web Server Common
1010944 - Apache Druid Remote Code Execution Vulnerability (CVE-2021-25646) - 1
1010890* - HPE Systems Insight Manager AMF Deserialization of Untrusted Data Vulnerability (CVE-2020-7200)
1010949 - Microsoft Windows HTTP Protocol Stack Remote Code Execution Vulnerability (CVE-2021-31166)
Web Server HTTPS
1010935 - Joomla! CMS Stored Cross-Site Scripting Vulnerability (CVE-2021-26030)
1010948 - Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-28482)
Web Server Miscellaneous
1010670* - Apache Struts2 Remote Code Execution Vulnerability (CVE-2020-17530)
Web Server Nagios
1010943 - Nagios XI Authenticated OS Command Argument Injection Vulnerability (CVE-2020-5792)
Web Server Oracle
1010926* - Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Vulnerability (CVE-2021-2211)
Web Server SharePoint
1010947 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2021-31181)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Netatalk DSI
1010921* - Netatalk Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2018-1160)
Web Application Common
1010918* - Nagios XI Remote Code Execution Vulnerability (CVE-2020-35578)
1010942 - WordPress XML External Entity Injection Vulnerability (CVE-2021-29447)
Web Application PHP Based
1010931* - GetSimple CMS Cross Site Scripting Vulnerability (CVE-2020-23839)
1010642 - WordPress XMLRPC Brute Force Amplification Attack
Web Client Common
1010940 - XStream Library Regular Expression Denial Of Service Vulnerability (CVE-2021-21348)
Web Client Internet Explorer/Edge
1010946 - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2021-26419)
Web Server Common
1010944 - Apache Druid Remote Code Execution Vulnerability (CVE-2021-25646) - 1
1010890* - HPE Systems Insight Manager AMF Deserialization of Untrusted Data Vulnerability (CVE-2020-7200)
1010949 - Microsoft Windows HTTP Protocol Stack Remote Code Execution Vulnerability (CVE-2021-31166)
Web Server HTTPS
1010935 - Joomla! CMS Stored Cross-Site Scripting Vulnerability (CVE-2021-26030)
1010948 - Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-28482)
Web Server Miscellaneous
1010670* - Apache Struts2 Remote Code Execution Vulnerability (CVE-2020-17530)
Web Server Nagios
1010943 - Nagios XI Authenticated OS Command Argument Injection Vulnerability (CVE-2020-5792)
Web Server Oracle
1010926* - Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Vulnerability (CVE-2021-2211)
Web Server SharePoint
1010947 - Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2021-31181)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.