Exploited Vulnerabilities DailyCVE-2022-42948: Fortra Cobalt Strike
EPSS2.7%No. 1536 of 1739 in KEV
CVE year2022~1 yrs before listing
Same vendor in KEV4
Same product2
| Field | Value |
|---|---|
| Vendor | Fortra |
| Product | Cobalt Strike |
| Name | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability |
| Added to KEV | 2023-03-30 |
| US federal due date | 2023-04-20 |
| Ransomware use | Unknown |
| CWE | CWE-79, CWE-116 |
CISA description
Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 46.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Fortra Cobalt Strike vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-03-30.