UnscoredCISA KEV

CVE-2022-39197

Fortra — Cobalt Strike

Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability. Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed username in the Beacon configuration, allowing them to execute code remotely.

CVSSNot scored

EPSS46.4%

Exploit StatusConfirmed (CISA KEV)

PublishedMar 30, 2023

Last ModifiedUndated

VendorFortra

ProductCobalt Strike

View on NVD

Vulnerability Timeline

PublishedMar 30, 2023

Added to CISA KEVMar 30, 2023

CISA Remediation DueApr 20, 2023

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a documented actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

More from Fortra in the catalogue.

CVE-2025-10035GoAnywhere MFTPublished Sep 29, 2025 CVE-2022-42948Cobalt StrikePublished Mar 30, 2023 CVE-2023-0669GoAnywhere MFTPublished Feb 10, 2023

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a vulnerability matches it.

Explore Seraph CTI Back to Vulnerability Catalogue