{"metadata": {"vulnerability": "CVE-2022-37393", "count": 29, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 16}}, "data": [{"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-10-27T21:00:00Z", "date_only": false, "value": "2021-10-27T21:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-10-27T21:00:00Z", "date_only": false, "value": "2021-10-27T21:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-37393", "record": "GSD-2022-37393", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2022-08-02T00:00:00Z", "date_only": false, "value": "2022-08-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-37393", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-09T16:39:19Z", "date_only": false, "value": "2022-08-09T16:39:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zimbra_slapper_priv_esc.rb", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "aa6108eb-f0e6-4125-a06a-6c38b4dd64ae", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zimbra_slapper_priv_esc.rb"}, {"timestamp": "2022-08-16T20:00:19Z", "date_only": false, "value": "2022-08-16T20:00:19.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-08-16T20:00:19.211Z", "date_only": false, "value": "2022-08-16T20:00:19.211Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-37393", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-08-16T20:15:00Z", "date_only": false, "value": "2022-08-16T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8JJP-3PJ6-XX8J", "record": "GHSA-8JJP-3PJ6-XX8J", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-08-16T20:15:00Z", "date_only": false, "value": "2022-08-16T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-37393", "record": "GSD-2022-37393", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-08-16T20:15:07.860Z", "date_only": false, "value": "2022-08-16T20:15:07.860", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-37393", "record": "FKIE_CVE-2022-37393", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-08-17T00:00:18Z", "date_only": false, "value": "2022-08-17T00:00:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8JJP-3PJ6-XX8J", "record": "GHSA-8JJP-3PJ6-XX8J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-08-17T14:35:04Z", "date_only": false, "value": "2022-08-17T14:35:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RSu8n7LvnC9xeCRU6JhJsfiUmeq682EnNiL5z7-ptljYhA", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "60dc686c-8302-4cd9-844d-1c3fa76a354f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-18T17:12:00Z", "date_only": false, "value": "2022-08-18T17:12Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-37393", "record": "GSD-2022-37393", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-08-19T00:00:21Z", "date_only": false, "value": "2022-08-19T00:00:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8JJP-3PJ6-XX8J", "record": "GHSA-8JJP-3PJ6-XX8J", "field": "modified", "linked_record": true}, {"timestamp": "2022-08-19T11:18:01Z", "date_only": false, "value": "2022-08-19T11:18:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6631", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "36cac417-51e0-4e3d-ac0d-97ddc5f6b760", "content": "#exploit\n1. CVE-2022-36271:\nhttps://github.com/SaumyajeetDas/POC-of-CVE-2022-36271\n\n2. Sysax <= 5.53 SSH Username BoF Pre Auth RCE\nhttps://github.com/M4fiaB0y/Sysax-multi-server-ssh-username-exploit\n\n3. CVE-2022-37393:\nPrivilege escalation in Zimbra Collaboration Suite\nhttps://attackerkb.com/topics/92AeLOE1M1/cve-2022-37393/rapid7-analysis", "url": "https://t.me/CyberSecurityTechnologies/6631", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-20T10:30:14Z", "date_only": false, "value": "2022-08-20T10:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/427", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "54a0ea26-fba9-438c-b7a5-ff136f0753c6", "content": "CVE-2022-37393 : Privilege escalation in Zimbra Collaboration Suite\nRepo : https://attackerkb.com/topics/92AeLOE1M1/cve-2022-37393/rapid7-analysis\nNuclei : https://github.com/projectdiscovery/nuclei-templates/pull/5134/files\nMeta : https://github.com/rapid7/metasploit-framework/pull/16807", "url": "https://t.me/MrVGunz/427", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": true, "value": "2022-09-14", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-009", "record": "CERTFR-2022-ALE-009", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2022-10-07T00:00:00Z", "date_only": false, "value": "2022-10-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-009", "record": "CERTFR-2022-ALE-009", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": false, "value": "2022-10-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-009", "record": "CERTFR-2022-ALE-009", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": false, "value": "2022-10-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-902", "record": "CERTFR-2022-AVI-902", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-03-14T00:00:00Z", "date_only": false, "value": "2023-03-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-009", "record": "CERTFR-2022-ALE-009", "field": "revisions.2.revision_date", "linked_record": true}, {"timestamp": "2023-12-13T01:19:13.197Z", "date_only": false, "value": "2023-12-13T01:19:13.197228Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-37393", "record": "GSD-2022-37393", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T10:29:21.022Z", "date_only": false, "value": "2024-08-03T10:29:21.022Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-37393", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-17T00:45:31.181Z", "date_only": false, "value": "2024-09-17T00:45:31.181Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-37393", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "b000b161-8efd-41aa-ac42-5d9e008deb8b"}, {"timestamp": "2025-02-23T04:10:48Z", "date_only": false, "value": "2025-02-23T04:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "6d5fc72e-62f5-4cde-8b7d-f37f9cfabcea"}, {"timestamp": "2026-06-17T04:55:01.197Z", "date_only": false, "value": "2026-06-17T04:55:01.197", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-37393", "record": "FKIE_CVE-2022-37393", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-09T04:31:37.185Z", "date_only": false, "value": "2026-08-09T04:31:37.185093Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2320", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "0a4fa976-9d97-425a-a6bf-0eaea07b2be4", "content": "#exploit\n1. CVE-2022-36271:\nhttps://github.com/SaumyajeetDas/POC-of-CVE-2022-36271\n\n2. Sysax <= 5.53 SSH Username BoF Pre Auth RCE\nhttps://github.com/M4fiaB0y/Sysax-multi-server-ssh-username-exploit\n\n3. CVE-2022-37393:\nPrivilege escalation in Zimbra Collaboration Suite\nhttps://attackerkb.com/topics/92AeLOE1M1/cve-2022-37393/rapid7-analysis", "url": "https://t.me/onelab1337/2320"}, {"timestamp": "2026-08-10T00:00:29.054Z", "date_only": false, "value": "2026-08-10T00:00:29.054320Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2320", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "82c92bd7-85ab-466e-913f-088f9dd37a75", "content": "#exploit\n1. CVE-2022-36271:\nhttps://github.com/SaumyajeetDas/POC-of-CVE-2022-36271\n\n2. Sysax <= 5.53 SSH Username BoF Pre Auth RCE\nhttps://github.com/M4fiaB0y/Sysax-multi-server-ssh-username-exploit\n\n3. CVE-2022-37393:\nPrivilege escalation in Zimbra Collaboration Suite\nhttps://attackerkb.com/topics/92AeLOE1M1/cve-2022-37393/rapid7-analysis", "url": "https://t.me/onelab1337/2320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-03T08:13:14.381Z", "anchors": {"origin": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-08-17T14:35:04Z", "date_only": false, "value": "2022-08-17T14:35:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RSu8n7LvnC9xeCRU6JhJsfiUmeq682EnNiL5z7-ptljYhA", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "60dc686c-8302-4cd9-844d-1c3fa76a354f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 25454104.0, "hours": 7070.584444444445, "days": 294.6076851851852, "min_seconds": 25367704.0, "max_seconds": 25454104.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-08-17T14:35:04Z", "date_only": false, "value": "2022-08-17T14:35:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RSu8n7LvnC9xeCRU6JhJsfiUmeq682EnNiL5z7-ptljYhA", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "60dc686c-8302-4cd9-844d-1c3fa76a354f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 158400794.381629, "hours": 44000.22066156361, "days": 1833.3425275651502, "min_seconds": 158314394.381629, "max_seconds": 158400794.381629, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-10-27T00:00:00Z", "date_only": false, "value": "2021-10-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / rapid7", "record": "CVE-2022-37393", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T08:13:14.381Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 132946690.381629, "hours": 36929.636217119165, "days": 1538.7348423799654, "min_seconds": 132946690.381629, "max_seconds": 132946690.381629, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-08-17T14:35:04Z", "date_only": false, "value": "2022-08-17T14:35:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RSu8n7LvnC9xeCRU6JhJsfiUmeq682EnNiL5z7-ptljYhA", "record": "CVE-2022-37393", "field": "creation_timestamp", "uuid": "60dc686c-8302-4cd9-844d-1c3fa76a354f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T08:13:14.381Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}