target entity

Cobalt Strike

2 source-linked records in the current knowledge graph.

Mar 30, 2023high

CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Required action: Apply updates per vendor instructions.

CVE-2022-42948EPSS 2.7%Cobalt StrikeFortra

CISA KEV ↗ · unattributed attribution

Mar 30, 2023high

CVE-2022-39197: Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Required action: Apply updates per vendor instructions.

CVE-2022-39197EPSS 46.4%Cobalt StrikeFortra

CISA KEV ↗ · unattributed attribution