CS
Product
Cobalt Strike
On CISA KEVExploited in the wild
4
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Cobalt Strike to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23317 | 7.5 | Feb 15 | CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL Affected: before 4.5 |
| CVE-2021-36798 | 7.5 | Aug 9 | A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3 Affected: 4.2; 4.3 |
Showing 2