VA-25-120-01 — Commvault Web Server unspecified vulnerability

Summary

According to Commvault: "The Web Server is a component in CommCell environments that provides a RESTful interface to the software where users can perform various tasks using available APIs". A remote, authenticated attacker can exploit an unspecified vulnerability to compromise a Commvault Web Server.

Vulnerabilities 1

High 8.8

CVE-2025-3928 Exploited

Commvault Web Server unspecified vulnerability

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.4…

Commvault Web Server

Apr 25, 2025
KEV Apr 28, 2025

Revision history

2025-04-30 #1.0.0
Initial publication