CVE-2022-39197 Fortra Cobalt Strike
Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.
- CVSS
- not scored
On CISA’s exploited list
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
- Added
- 2023-03-30
- Federal patch deadline
- 2023-04-20
- Ransomware use
- not known