[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":48,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":55,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":61,"vulnerability-29799":68},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":41,"text":42,"link":43,"external":44,"targets":45,"cta":47,"variant":13,"campaign_id":41},"Office Hours #13 - Reducing tool sprawl","office-hours-13","[Live Office Hours, Wed Oct 14] How to consolidate your security testing stack without the lock-in","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_m_Won6d_SzOQ-gYhCdXU_A",true,[46],"\u002F","Save your spot",["Island",49],{"key":50,"params":51,"result":53},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":52},"{}",{"head":54},{},["Island",56],{"key":57,"params":58,"result":59},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":52},{"head":60},{},["Island",62],{"key":63,"params":64,"result":66},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":65},"{\"text-color\":\"gray\"}",{"head":67},{},{"id":69,"detectable_with":70,"vuln_details":77,"vuln_id":99,"name":100,"published":101,"updated":78},29799,{"tool":71,"engine":74},{"id":72,"name":73},1,"Network Scanner",{"id":75,"name":76},2,"Nuclei",{"id":69,"codename":78,"description":78,"severity":79,"risk_description":80,"public_description":81,"public_recommendation":82,"recommendation":78,"references":83,"cvssv3":91,"epss_score":92,"epss_percentile":93,"cve":94,"in_cisa_catalog":44,"date":96,"software_type":78,"vendor":97,"product":98,"ptt_exploit_capabilities":78},null,"high","The risk exists that a remote unauthenticated attacker can fully compromise the server to steal confidential information, install ransomware, or pivot to the internal network.","Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.","Apply Zimbra Collaboration 8.8.15 Patch 31 or 9.0.0 Patch 24 (both released 2022-03-30) or later, which also requires the CVE-2022-37042 fix in 8.8.15 Patch 33 \u002F 9.0.0 Patch 26 to close the authentication bypass on the same mboximport endpoint.",[84,85,86,87,88,89,90],"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F168146\u002FZimbra-Zip-Path-Traversal.html","https:\u002F\u002Fwiki.zimbra.com\u002Fwiki\u002FSecurity_Center","https:\u002F\u002Fwiki.zimbra.com\u002Fwiki\u002FZimbra_Releases\u002F9.0.0\u002FP24","https:\u002F\u002Fwiki.zimbra.com\u002Fwiki\u002FZimbra_Releases\u002F8.8.15\u002FP31","https:\u002F\u002Fwiki.zimbra.com\u002Fwiki\u002FZimbra_Security_Advisories","https:\u002F\u002Fwww.volexity.com\u002Fblog\u002F2022\u002F08\u002F10\u002Fmass-exploitation-of-unauthenticated-zimbra-rce-cve-2022-27925\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2022-27925",7.2,0.98676,0.99923,[95],"CVE-2022-27925","2022-04-21T00:00:00Z","synacor","zimbra_collaboration_suite","NETSCAN-NUCLEI-CVE-CVE-2022-27925","Zimbra Collaboration Suite 8.8.15\u002F9.0 - Zip Path Traversal","2026-10-08T00:00:00Z"]