CVE-2022-39197
mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.467 · 99 %ileexploit · PoCEUUSadded 2023-03-30remediate by 2023-04-20
required action Apply updates per vendor instructions.
EPSS · scored 2026-10-26
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the payload (or create a new payload with the extracted information and then modify that username field to be malformed).
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
ATT&CK techniques
ATT&CK techniques this enables or maps to.
exploits (15)
Public proof-of-concept and weaponised exploit code.
- 4nth0ny1130/CVE-2022-39197-fix_patchCVE-2022-39197 bug fix patchPoC · poc_in_github
- TheCryingGame/CVE-2022-39197-RCECVE-2022-39197 RCE POCPoC · poc_in_github
- adeljck/CVE-2022-39197CVE-2022-39197PoC · poc_in_github
- burpheart/cve-2022-39197cve-2022-39197 pocPoC · poc_in_github
affected products (2)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-39197/cnnvd
- https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/cnnvd
- https://www.cobaltstrike.com/blog/tag/release/cnnvd
- https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/enisa_euvd
- https://www.cobaltstrike.com/blog/tag/release/enisa_euvd
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-39197US Government Resourcenvd
- https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/MitigationVendor Advisorynvd
- https://www.cobaltstrike.com/blog/tag/release/Release NotesVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan