CVE-2022-42948
FO
Fortra Cobalt Strike
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
What it is
Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/
- nvd.nist.gov/vuln/detail/CVE-2022-42948
Description and required action as published by CISA. Full record at NVD.
Other Fortra entries on the list
- GoAnywhere MFT Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CVE-2025-10035 · Sep 29, 2025
- Cobalt Strike Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability CVE-2022-39197 · Mar 30, 2023
- GoAnywhere MFT Fortra GoAnywhere MFT Remote Code Execution Vulnerability CVE-2023-0669 · Feb 10, 2023