PULSE
ESEN
FEED
ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Education
← Todos os CVEs
CVE Watch—

CVE-2022-42948

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

2.7%

p86

KEV

SIM

30 de mar. de 2023

Exploit Today

76

0-100

Publicado: — · Última mod.: —

EPSS · 30d
2.7%EPSS · 30 dias2.7%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Fortra / Cobalt Strike

Vulnerabilidade

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Adicionado ao KEV

30 de mar. de 2023

Corrigir até

20 de abr. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/; https://nvd.nist.gov/vuln/detail/CVE-2022-42948

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-39197—
98.8%
KEV—80Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability—