Fortra
4 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-0669 |
GoAnywhere MFT | — | 1.0000 | 2023-02-10 | 2023-03-03 | RW | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remo |
CVE-2025-10035 |
GoAnywhere MFT | — | 0.9982 | 2025-09-29 | 2025-10-20 | RW | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability |
CVE-2022-39197 |
Cobalt Strike | — | 0.4672 | 2023-03-30 | 2023-04-20 | Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Team | |
CVE-2022-42948 |
Cobalt Strike | — | 0.0271 | 2023-03-30 | 2023-04-20 | Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted |