Cobalt Strike vulnerabilities

3 known vulnerabilities in Cobalt Strike from Helpsystems. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Fortra Cobalt Strike User Interface Remote Code Execution Exploited

  CVE-2022-42948Mar 24, 2023HelpsystemsEPSS 2.71%

  Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.

• 6.1 Medium severity

  Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Exploited

  CVE-2022-39197Sep 22, 2022HelpsystemsEPSS 44.1%

  An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and the

• 7.5 High severity

  Cobalt Strike: Improper Authentication

  CVE-2022-23317Feb 15, 2022HelpsystemsEPSS 1.08%

  CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.