[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":44,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":51,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":57,"vulnerability-5058":64},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":14,"text":41,"link":8,"external":9,"targets":42,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Homepage","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.",[43],"\u002F",["Island",45],{"key":46,"params":47,"result":49},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":48},"{}",{"head":50},{},["Island",52],{"key":53,"params":54,"result":55},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":48},{"head":56},{},["Island",58],{"key":59,"params":60,"result":62},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":61},"{\"text-color\":\"gray\"}",{"head":63},{},{"id":65,"detectable_with":66,"vuln_details":73,"vuln_id":101,"name":102,"published":103,"updated":74},5058,{"tool":67,"engine":70},{"id":68,"name":69},1,"Network Scanner",{"id":71,"name":72},3,"OpenVAS",{"id":65,"codename":74,"description":74,"severity":74,"risk_description":75,"public_description":76,"public_recommendation":77,"recommendation":74,"references":78,"cvssv3":74,"epss_score":92,"epss_percentile":93,"cve":94,"in_cisa_catalog":9,"date":100,"software_type":74,"vendor":74,"product":74,"ptt_exploit_capabilities":74},null,"The TLSv1.0 and TLSv1.1 protocols contain known cryptographic flaws like: - CVE-2011-3389: Browser Exploit Against SSL\u002FTLS (BEAST) - CVE-2015-0204: Factoring Attack on RSA-EXPORT Keys Padding Oracle On Downgraded Legacy Encryption (FREAK) An attacker might be able to use the known cryptographic flaws to eavesdrop the connection between clients and the service to get access to sensitive data transferred within the secured connection. Furthermore newly uncovered vulnerabilities in this protocols wont receive security updates anymore.","It was possible to detect the usage of the deprecated TLSv1.0 and\u002For TLSv1.1 protocol on this system.","It is recommended to disable the deprecated TLSv1.0 and\u002For TLSv1.1 protocols in favor of the TLSv1.2+ protocols. Please see the references for more resources supporting you with this task.",[79,80,81,82,83,84,85,86,87,88,89,90,91],"https:\u002F\u002Fssl-config.mozilla.org","https:\u002F\u002Fwww.bsi.bund.de\u002FSharedDocs\u002FDownloads\u002FEN\u002FBSI\u002FPublications\u002FTechGuidelines\u002FTG02102\u002FBSI-TR-02102-1.html","https:\u002F\u002Fwww.bsi.bund.de\u002FEN\u002FThemen\u002FOeffentliche-Verwaltung\u002FMindeststandards\u002FTLS-Protokoll\u002FTLS-Protokoll_node.html","https:\u002F\u002Fwww.bsi.bund.de\u002FSharedDocs\u002FDownloads\u002FDE\u002FBSI\u002FPublikationen\u002FTechnischeRichtlinien\u002FTR03116\u002FBSI-TR-03116-4.html","https:\u002F\u002Fwww.bsi.bund.de\u002FSharedDocs\u002FDownloads\u002FDE\u002FBSI\u002FMindeststandards\u002FMindeststandard_BSI_TLS_Version_2_4.html","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20240113175943\u002Fhttps:\u002F\u002Fwww.bettercrypto.org","https:\u002F\u002Fwww.enisa.europa.eu\u002Fpublications\u002Falgorithms-key-size-and-parameters-report-2014","https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Frfc8996\u002F","https:\u002F\u002Fvnhacker.blogspot.com\u002F2011\u002F09\u002Fbeast.html","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20201108095603\u002Fhttps:\u002F\u002Fcensys.io\u002Fblog\u002Ffreak","https:\u002F\u002Fcertvde.com\u002Fen\u002Fadvisories\u002FVDE-2025-031\u002F","https:\u002F\u002Fgist.github.com\u002Fnyxfqq\u002Fcfae38fada582a0f576d154be1aeb1fc","https:\u002F\u002Fadvisories.ncsc.nl\u002Fadvisory?id=NCSC-2024-0273",0.98685,0.99924,[95,96,97,98,99],"CVE-2011-3389","CVE-2015-0204","CVE-2023-41928","CVE-2024-41270","CVE-2025-3200","2011-09-06T00:00:00Z","NETSCAN-OPENVAS-1.3.6.1.4.1.25623.1.0.117274","SSL\u002FTLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detection","2021-03-25T00:00:00Z"]