Vendors / Helpsystems Records 7 All Threatist records
Exploited (KEV) 2
CVSS critical 2
CVSS high 2
Exploited now Helpsystems records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 100KEV
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02706 · Published 2023-03-24 · No fix listed CWE-116
Priority HIGH 84KEV
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.44145 · Published 2022-09-22 · No fix listed CWE-79
Priority MEDIUM 40
A Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt Strike 4.2 and 4.3.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.04292 · Published 2021-08-09 · No fix listed CWE-770
Priority LOW 35
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01076 · Published 2022-02-15 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
2 2 3 0 0
THREATIST.IORead the docs