Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948) ยท updates https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948 Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely. Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. Added to CISA KEV on 2023-03-30. en Thu, 30 Mar 2023 00:00:00 GMT Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948): CISA added CVE-2022-39197 to the KEV catalog (due 2023-04-20). https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948 https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948#2023-03-30-a97a80b0 Thu, 30 Mar 2023 00:00:00 GMT critical <p>Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948): CISA added CVE-2022-39197 to the KEV catalog (due 2023-04-20).</p> Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948): CISA added CVE-2022-42948 to the KEV catalog (due 2023-04-20). https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948 https://pwn.watch/i/fortra-cobalt-strike-cve-2022-39197-42948#2023-03-30-045a7bb6 Thu, 30 Mar 2023 00:00:00 GMT critical <p>Fortra Cobalt Strike: 2 exploited vulnerabilities (CVE-2022-39197, CVE-2022-42948): CISA added CVE-2022-42948 to the KEV catalog (due 2023-04-20).</p>