CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-09-22
Cobalt Strike Teamserver Remote Cross-Site Scripting (XSS) Vulnerability (CVE-2022-39197) Security Advisory
[Affected Scope] HelpSystems Cobalt Strike through version 4.7 (specifically affecting the Teamserver component)
[Impact] A remote attacker can execute arbitrary HTML/JS code within the Cobalt Strike operator console by spoofing the username field in a beacon payload, potentially leading to session hijacking or information disclosure
[Mitigation] Immediately upgrade Cobalt Strike to the official patched version 4.7.1 or higher