Skip to content

Product

Commvault Web Server vulnerabilities

1 published CVE affecting Commvault Web Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest Commvault Web Server CVEs

Newest publication first

  1. CVE-2025-3928 Commvault Web Server unspecified vulnerability

    Published
    HighCVSS 8.7 EPSS 2.5% CISA KEV added 2025-04-28 Exploited in the wild

    Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.14...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.