CVE-2015-7253 The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie.

HighCVSS 10.0 EPSS 4.0%

Published: 2015-11-04 04:00
Updated: 2026-06-17 03:32
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie.

Affected products

Product	Affected versions	Fixed in
Commvault edge server	= 10-r2	No fix listed

References

VU#866432 third-party-advisory us-government-resource

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 4.00% (percentile 90.7)
CWE: CWE-78

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.