Rule Document 1:58795

Rule Groups

Vendors + Products::NetApp::OnCommand

NetApp OnCommand management and monitoring software suite including Unified Manager, Workflow Automation, Insight, Performance Manager, System Manager and Cloud Manager.

Vendors + Products::Oracle::Fusion Middleware

Oracle Fusion Middleware platform covering WebLogic Server, GlassFish, WebCenter, Access Manager, Identity Manager, HTTP Server, Outside In Technology, Managed File Transfer and Endeca products.

Vendors + Products::NetApp::Active IQ

NetApp Active IQ unified management, analytics and service level management platform.

Vendors + Products::Oracle::Financial Services

Oracle Financial Services analytical and compliance applications covering behavior detection, risk management, case management and revenue billing analytics.

Vendors + Products::Oracle::MySQL

Detection coverage for vulnerabilities affecting the Oracle MySQL open-source relational database server.

Vendors + Products::Cisco::UCS / HyperFlex

Cisco Unified Computing System server infrastructure: UCS Manager, UCS Director, Integrated Management Controller (IMC), Intersight and HyperFlex.

Vendors + Products::NetApp::SolidFire HCI

NetApp SolidFire and HCI all-flash storage platform including SolidFire Enterprise SDS, HCI storage and compute nodes, Element OS and management node.

Vendors + Products::Cisco::Collaboration

Cisco collaboration portfolio: Webex meetings and server, Unified Communications Manager (CUCM), contact center (UCCX/UCCE/Finesse), IM and Presence, TelePresence/video endpoints (Tandberg, Expressway, VCS) and video surveillance.

Vendors + Products::Cisco::Nexus

Cisco NX-OS and all Nexus data center switch hardware (3000/5000/6000/7000/9000 series), Nexus Dashboard and DC fabric management tools including DCNM and Network Insights.

Vendors + Products::Debian::Linux

Debian GNU/Linux OS and its APT package manager.

Vendors + Products::NetApp::Cloud Services

NetApp cloud data services including BlueXP (formerly Cloud Manager), Cloud Insights, Cloud Backup, Cloud Secure Agent and Astra Control Center.

Vendors + Products::Oracle::Communications

Oracle Communications product line covering telecom billing (BRM), diameter signaling (Eagle, DSR), session management, cloud-native core network functions and convergent charging.

Vendors + Products::Cisco::Prime

Cisco Prime network management suite: Prime Infrastructure, Prime Collaboration, Prime Network Registrar, Prime Access Registrar and legacy CiscoWorks.

Vendors + Products::Oracle::PeopleSoft

Oracle PeopleSoft ERP platform including PeopleTools and EnterpriseOne variants.

Vendors + Products::Oracle::E-Business Suite

Oracle E-Business Suite ERP/CRM platform and related modules including supply chain, general ledger, project management, policy automation and utilities applications.

Vendors + Products::NetApp::ONTAP

NetApp ONTAP storage operating system, covering clustered Data ONTAP, 7-mode, ONTAP 9, ONTAP Select, ONTAP Tools, Trident container storage and VASA provider.

Vendors + Products::Fedora Project::Fedora Linux

Fedora Linux OS and the Extra Packages for Enterprise Linux (EPEL) repository.

Vendors + Products::Cisco::SD-WAN

Cisco SD-WAN: vEdge routers, vManage/vBond/vSmart controllers, Catalyst SD-WAN Manager and WAN Automation Engine.

Vulnerability::Severity::Medium

Rules that cover vulnerabilities that have CVSS scores of 4.0-6.9.

Vulnerability::Severity::Critical

Rules that cover vulnerabilities that have CVSS scores of 10 (CVSS V2.0) or 9.0-10.0 (CVSS V3.0 ).

MITRE::ATT&CK Framework::Enterprise::Initial Access::Exploit Public-Facing Application

Adversaries may attempt to take advantage of a weakness in an Internet-facing computer or program using software, data, or commands in order to cause unintended or unanticipated behavior. The weakness in the system can be a bug, a glitch, or a design vulnerability. These applications are often websites, but can include databases (like SQL), standard services (like SMB or SSH), network device administration and management protocols (like SNMP and Smart Install), and any other applications with Internet accessible open sockets, such as web servers and related services.

T1190

Vulnerability::Severity::High

Rules that cover vulnerabilities that have CVSS scores of 7.0-9.9 (CVSS V2.0) or 7.0-8.9 (CVSS V3.0 ).

Vendors + Products::Oracle::MySQL Enterprise Monitor

Detection coverage for vulnerabilities affecting Oracle MySQL Enterprise Monitor, the MySQL performance and availability monitoring tool.

Vendors + Products::Oracle::Enterprise Manager

Oracle Enterprise Manager monitoring and management suite including Grid Control, Ops Center, Database Control and VDI editions.

Vendors + Products::Oracle::Agile PLM

Oracle Agile PLM product lifecycle management family including MCAD Connector, Engineering Data Management and AutoVue integration.

Vendors + Products::Cisco::Wireless LAN

Cisco wireless infrastructure: Aironet and Business series access points, Wireless LAN Controllers, AireOS, Catalyst 9800 and mobility services.

Vendors + Products::NetApp::SnapCenter

NetApp SnapCenter and Snap-family backup and data protection management tools including SnapManager, SnapDrive, SnapProtect and Snap Creator Framework.

Vendors + Products::Cisco::Smart Licensing

Cisco Smart Software Manager on-prem/satellite, Smart License Utility and CX Cloud telemetry agents.

Vendors + Products::Cisco::Secure

Cisco Secure endpoint and network security products: Secure Endpoint (AMP), ClamAV, AnyConnect/Secure Client, Stealthwatch/Secure Network Analytics, Cyber Vision, Immunet and Duo Device Health.

Vendors + Products::Cisco::ISE / ACS

Cisco Identity Services Engine (ISE) network access policy platform and legacy Access Control Server (ACS).

Vendors + Products::Cisco::Firepower

Cisco Firepower NGFW: Firepower Threat Defense (FTD), FXOS, Firepower Management Center (FMC), FireSIGHT and Sourcefire Defense Center.

Vendors + Products::Oracle::Database

Oracle Database server across major releases (8i, 9i, 10g, 11g) and associated tools including GoldenGate, TimesTen, SQL Developer, JDeveloper, BI Publisher and application object library components.