[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":44,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":51,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":57,"vulnerability-21090":64},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":14,"text":41,"link":8,"external":9,"targets":42,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Homepage","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.",[43],"\u002F",["Island",45],{"key":46,"params":47,"result":49},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":48},"{}",{"head":50},{},["Island",52],{"key":53,"params":54,"result":55},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":48},{"head":56},{},["Island",58],{"key":59,"params":60,"result":62},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":61},"{\"text-color\":\"gray\"}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":73,"vuln_id":95,"name":96,"published":97,"updated":74},21090,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":71,"name":72},3,"OpenVAS",{"id":65,"codename":74,"description":74,"severity":74,"risk_description":75,"public_description":76,"public_recommendation":77,"recommendation":74,"references":78,"cvssv3":74,"epss_score":88,"epss_percentile":89,"cve":90,"in_cisa_catalog":9,"date":74,"software_type":74,"vendor":74,"product":74,"ptt_exploit_capabilities":74},null,"- Input appended to the URL after servlet\u002F is not properly sanitized before being returned to the user. - Input passed via the Src parameter to MailFS and WebInteriorMailFS is not properly sanitized before being returned to the user. - Input passed via the RedirectTo parameter to names.nsf?Login is not properly sanitized before being returned to the user. - The domcfg.nsf page is accessible without authentication, there is a leakage of information about web server configuration. Successful exploitation will allow attacker to execute arbitrary HTML or web script in a users browser session in context of an affected site, compromise the application and access web server configuration information.","Lotus Domino HTTP Server is prone to multiple vulnerabilities.","Update to IBM Lotus Domino 8.5.4 or later.",[79,80,81,82,83,84,85,86,87],"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F50330","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F55095","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F58152","http:\u002F\u002Fsecurityvulns.ru\u002Fdocs28474.html","http:\u002F\u002Fxforce.iss.net\u002Fxforce\u002Fxfdb\u002F77401","http:\u002F\u002Fxforce.iss.net\u002Fxforce\u002Fxfdb\u002F79233","http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2012\u002FSep\u002F55","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21614077","http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21608160",0.01467,0.7215,[91,92,93,94],"CVE-2012-3301","CVE-2012-3302","CVE-2012-4842","CVE-2012-4844","NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.803187","IBM Lotus Domino HTTP Server Multiple Vulnerabilities","2018-01-02T00:00:00Z"]