Helpsystems vulnerabilities
We track 3 vulnerabilities in Helpsystems products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on March 24, 2023.
Latest Helpsystems vulnerabilities
- 9.8 Critical severity
Fortra Cobalt Strike User Interface Remote Code Execution Exploited
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.
- 6.1 Medium severity
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Exploited
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and the
- 7.5 High severity
Cobalt Strike: Improper Authentication
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.