Fortra known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 4 Fortra vulnerabilities: 0 added in the last 365 days, 2 rated critical (CVSS 9 or higher), and 2 with known ransomware use. The most recent was added Sep 29, 2025.
RSS feed for Fortra exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-09-29 | CVE-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 10 (v3.1) | 99.8% | 2025-10-20 | Known |
| 2023-03-30 | CVE-2022-39197 | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 6.1 (v3.1) | 46.7% | 2023-04-20 | Unknown |
| 2023-03-30 | CVE-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 9.8 (v3.1) | 2.7% | 2023-04-20 | Unknown |
| 2023-02-10 | CVE-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 7.2 (v3.1) | >99.9% | 2023-03-03 | Known |