Medium severity6.1CISA KEVNVD Advisory· Published Sep 22, 2022· Updated Jun 17, 2026
CVE-2022-39197
CVE-2022-39197
Description
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and then modify the username field in the payload (or create a new payload with the extracted information and then modify that username field to be malformed).
Affected products
4cpe:2.3:a:helpsystems:cobalt_strike:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:helpsystems:cobalt_strike:*:*:*:*:*:*:*:*range: <4.7.1
- (no CPE)range: <=4.7
- HelpSystems/Cobalt Strikedescription
- Range: <=4.7
Patches
Vulnerability mechanics
References
3- www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/nvdMitigationVendor Advisory
- www.cobaltstrike.com/blog/tag/release/nvdRelease NotesVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.