Commvault kayıtları
commvault üreticisine ait 30 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %6,7
- Silahlaştırılmış
- 6 · %20
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %53,3
- Yayından KEV’e ortanca
- 7 gün
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-863 Incorrect Authorization2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-121 Stack-based Buffer Overflow2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
30 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
96Hemen | CVE-2025-34028Silahlaştırılmış | Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversalcommvault · commvault · CWE-22 | Kritik9,3 | KEV | %97,6 | 22 Nis 2025 |
65Bu hafta | CVE-2025-3928Silahlaştırılmış | Commvault Web Server unspecified vulnerabilitycommvault · commvault | Yüksek8,7 | KEV | %2,3 | 25 Nis 2025 |
60Bu hafta | CVE-2021-34996İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.commvault · commcell · CWE-749 | Yüksek8,8 | — | %82,3 | 13 Oca 2022 |
60Bu hafta | CVE-2017-18044Silahlaştırılmış | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.commvault · commvault · CWE-78 | Kritik9,8 | — | %69,8 | 19 Oca 2018 |
56Planlayın | CVE-2021-34995İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.commvault · commcell · CWE-434 | Yüksek8,8 | — | %68,9 | 13 Oca 2022 |
45Planlayın | CVE-2017-3195Kavram kanıtı | Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflcommvault · edge · CWE-121 | Kritik9,8 | — | %21,4 | 15 Ara 2017 |
41Planlayın | CVE-2021-34993İstismar yok | This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22.commvault · commcell · CWE-287 | Kritik9,8 | — | %5,4 | 13 Oca 2022 |
41Planlayın | CVE-2015-7253İstismar yok | The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a coocommvault · edge server · CWE-78 | Kritik10,0 | — | %4,0 | 3 Kas 2015 |
40Planlayın | CVE-2025-57790Silahlaştırılmış | Path Traversal Vulnerabilitycommvault · commvault · CWE-36 | Yüksek8,7 | — | %19,4 | 20 Ağu 2025 |
37İzleyin | CVE-2021-34994İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.commvault · commcell · CWE-20 | Yüksek8,8 | — | %5,8 | 13 Oca 2022 |
37İzleyin | CVE-2026-77089İstismar yok | Command Center API Authentication Bypasscommvault · commvault · CWE-290 | Kritik9,3 | — | %0,6 | 8 Eyl 2026 |
36İzleyin | CVE-2021-34997İstismar yok | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.commvault · commcell · CWE-434 | Yüksek8,8 | — | %4,2 | 13 Oca 2022 |
36İzleyin | CVE-2026-13738İstismar yok | Improper Authorization Validationcommvault · commvault · CWE-863 | Kritik9,2 | — | %0,6 | 11 Ağu 2026 |
36İzleyin | CVE-2026-13737İstismar yok | Command Restriction Bypasscommvault · commvault · CWE-863 | Kritik9,2 | — | %0,5 | 11 Ağu 2026 |
35İzleyin | CVE-2025-57791Silahlaştırılmış | Argument Injection Vulnerability in CommServecommvault · commvault · CWE-88 | Orta6,9 | — | %25,1 | 20 Ağu 2025 |
35İzleyin | CVE-2026-77098İstismar yok | Private Metrics Server SQL Injectioncommvault · commvault · CWE-89 | Yüksek8,8 | — | %0,5 | 8 Eyl 2026 |
35İzleyin | CVE-2026-77097İstismar yok | Private Metrics Server Denial of Servicecommvault · commvault · CWE-306 | Yüksek8,8 | — | %0,5 | 8 Eyl 2026 |
35İzleyin | CVE-2026-13739İstismar yok | Server-Side Request Forgery (SSRF)commvault · commvault · CWE-918 | Yüksek8,8 | — | %0,4 | 11 Ağu 2026 |
34İzleyin | CVE-2026-77103İstismar yok | CommServe Information Disclosurecommvault · commvault · CWE-288 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77102İstismar yok | CommServe Denial of Servicecommvault · commvault · CWE-122 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77101İstismar yok | CommServe Stack-based Buffer Overflowcommvault · commvault · CWE-121 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77105İstismar yok | CommServe Privilege Escalationcommvault · commvault · CWE-347 | Yüksek8,7 | — | %0,3 | 8 Eyl 2026 |
34İzleyin | CVE-2026-77091İstismar yok | DataCube Security Feature Bypasscommvault · commvault · CWE-22 | Yüksek8,5 | — | %0,2 | 8 Eyl 2026 |
33İzleyin | CVE-2020-25780Kavram kanıtı | In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal ccommvault · commcell · CWE-22 | Yüksek7,5 | — | %9,9 | 29 Eki 2020 |
33İzleyin | CVE-2026-77104İstismar yok | CommServe Path Traversalcommvault · commvault · CWE-22 | Yüksek8,3 | — | %0,6 | 8 Eyl 2026 |
- CVE-2025-3402896Hemen
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %98commvault · commvault22 Nis 2025
- CVE-2025-392865Bu hafta
Commvault Web Server unspecified vulnerability
YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %2commvault · commvault25 Nis 2025
- CVE-2021-3499660Bu hafta
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
YüksekCVSS 8,8İstismar yokEPSS %82commvault · commcell13 Oca 2022
- CVE-2017-1804460Bu hafta
A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.
KritikCVSS 9,8SilahlaştırılmışEPSS %70commvault · commvault19 Oca 2018
- CVE-2021-3499556Planlayın
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
YüksekCVSS 8,8İstismar yokEPSS %69commvault · commcell13 Oca 2022
- CVE-2017-319545Planlayın
Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl
KritikCVSS 9,8Kavram kanıtıEPSS %21commvault · edge15 Ara 2017
- CVE-2021-3499341Planlayın
This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22.
KritikCVSS 9,8İstismar yokEPSS %5commvault · commcell13 Oca 2022
- CVE-2015-725341Planlayın
The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a coo
KritikCVSS 10,0İstismar yokEPSS %4commvault · edge server3 Kas 2015
- CVE-2025-5779040Planlayın
Path Traversal Vulnerability
YüksekCVSS 8,7SilahlaştırılmışEPSS %19commvault · commvault20 Ağu 2025
- CVE-2021-3499437İzleyin
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
YüksekCVSS 8,8İstismar yokEPSS %6commvault · commcell13 Oca 2022
- CVE-2026-7708937İzleyin
Command Center API Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %1commvault · commvault8 Eyl 2026
- CVE-2021-3499736İzleyin
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
YüksekCVSS 8,8İstismar yokEPSS %4commvault · commcell13 Oca 2022
- CVE-2026-1373836İzleyin
Improper Authorization Validation
KritikCVSS 9,2İstismar yokEPSS %1commvault · commvault11 Ağu 2026
- CVE-2026-1373736İzleyin
Command Restriction Bypass
KritikCVSS 9,2İstismar yokEPSS %1commvault · commvault11 Ağu 2026
- CVE-2025-5779135İzleyin
Argument Injection Vulnerability in CommServe
OrtaCVSS 6,9SilahlaştırılmışEPSS %25commvault · commvault20 Ağu 2025
- CVE-2026-7709835İzleyin
Private Metrics Server SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-7709735İzleyin
Private Metrics Server Denial of Service
YüksekCVSS 8,8İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-1373935İzleyin
Server-Side Request Forgery (SSRF)
YüksekCVSS 8,8İstismar yokEPSS %0commvault · commvault11 Ağu 2026
- CVE-2026-7710334İzleyin
CommServe Information Disclosure
YüksekCVSS 8,7İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-7710234İzleyin
CommServe Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-7710134İzleyin
CommServe Stack-based Buffer Overflow
YüksekCVSS 8,7İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-7710534İzleyin
CommServe Privilege Escalation
YüksekCVSS 8,7İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2026-7709134İzleyin
DataCube Security Feature Bypass
YüksekCVSS 8,5İstismar yokEPSS %0commvault · commvault8 Eyl 2026
- CVE-2020-2578033İzleyin
In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal c
YüksekCVSS 7,5Kavram kanıtıEPSS %10commvault · commcell29 Eki 2020
- CVE-2026-7710433İzleyin
CommServe Path Traversal
YüksekCVSS 8,3İstismar yokEPSS %1commvault · commvault8 Eyl 2026