Helpsystems Cobalt_strike
4 CVEs affecting Helpsystems Cobalt_strike. Latest disclosed: 2023-03-24. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42948 | Critical | 9.8 | 2023-03-24 | Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely… |
CVE-2022-23317 | High | 7.5 | 2022-02-15 | CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the… |
CVE-2021-36798 | High | 7.5 | 2021-08-09 | A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3. It allows remote attackers to crash the C2 serv… |
CVE-2022-39197 | Medium | 6.1 | 2022-09-22 | An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Str… |