CVE-2022-39197 · Sandworm Watch

Mar 30, 2023high

CVE-2022-39197: Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Required action: Apply updates per vendor instructions.

CVE-2022-39197EPSS 46.4%Cobalt StrikeFortra

CISA KEV ↗ · unattributed attribution