Skip to content
OpenAdvisories

Vendor

Commvault

40 known vulnerabilities.

Products

Commvault Cloud 24 CommCell 9 Grid(HSX) CVFS 3 Commvault 2 Web Server 1 Service Pack 6 1 WebConsole 1 Commvault for Windows 1 Command Center Innovation Release 1 Command Center 0 Backup & Recovery 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-3928 Exploited

    Commvault Web Server unspecified vulnerability

    Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.4…

    Commvault Web Server
    KEV Apr 28, 2025
  • Critical 9.3
    CVE-2025-34028 Exploited Public exploit EPSS 98%

    Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

    The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Executi…

    Commvault Command Center Innovation Release
    KEV May 2, 2025