Login Request a demo
CS
Product
Cobalt Strike
by Helpsystems · last CVE Mar 24, 2023
On CISA KEVExploited in the wild
4
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Cobalt Strike to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-42948
In wildKEV
9.8
3%
Mar 24
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
Affected: 4.7.1
CVE-2022-39197
In wildKEV
6.1
47%
Sep 22
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
Affected: before 4.7.1
CVE-2022-23317
7.5
1%
Feb 15
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL
Affected: before 4.5
CVE-2021-36798
7.5
4%
Aug 9
A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3
Affected: 4.2; 4.3
Showing 4