Vendor

    Commvault

    43 known vulnerabilities in products by Commvault, 2 of them actively exploited (CISA KEV).

    Key figures

    43

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    12

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Commvault
    CriticalCVE-2025-34028

    Commvault Command Center Path Traversal Vulnerability

    In CISA KEV

    		10.0
    CriticalCVE-2025-3928

    Commvault Web Server unspecified vulnerability

    In CISA KEV

    		8.8
    HighCVE-2025-57790

    Path Traversal Vulnerability

    		8.8
    CriticalCVE-2017-18044

    Commvault Cloud: Command Injection

    		9.8
    CriticalCVE-2017-3195

    Commvault Service Pack 6: Stack-based Buffer Overflow

    		9.8
    HighCVE-2021-34996

    Commvault CommCell: Exposed Dangerous Method or Function

    		8.8
    HighCVE-2021-34995

    Commvault CommCell: Unrestricted Upload of File with Dangerous Type

    		8.8
    MediumCVE-2025-57791

    Argument Injection Vulnerability in CommServe

    		6.5
    CriticalCVE-2021-34993

    Commvault CommCell: Improper Authentication

    		9.8
    MediumCVE-2025-57788

    Unauthorized API Access Risk

    		6.5
    HighCVE-2021-34994

    Commvault CommCell: Improper Input Validation

    		8.8
    HighCVE-2021-34997

    Commvault CommCell: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2020-25780

    Commvault CommCell: Path Traversal

    		7.5
    CriticalCVE-2026-77089

    Command Center API Authentication Bypass

    		9.8
    CriticalCVE-2026-13738

    Improper Authorization Validation

    		9.8
    CriticalCVE-2026-13737

    Command Restriction Bypass

    		9.8
    CriticalCVE-2026-77098

    Private Metrics Server SQL Injection

    		9.8
    HighCVE-2026-77106

    Cvlaunchd Code Execution

    		8.8
    CriticalCVE-2026-13739

    Server-Side Request Forgery (SSRF)

    		9.8
    CriticalCVE-2026-77099

    CVFS Command Execution

    		—
    HighCVE-2026-77104

    CommServe Path Traversal

    		7.5
    HighCVE-2026-77103

    CommServe Information Disclosure

    		7.5
    HighCVE-2026-77097

    Private Metrics Server Denial of Service

    		8.2
    HighCVE-2026-77102

    CommServe Denial of Service

    		7.5
    HighCVE-2026-77101

    CommServe Stack-based Buffer Overflow

    		7.5

    All vulnerabilities in search

    Products

    Products by Commvault
    Commvault Cloud242
    Commvault Cloud240
    Commvault CommCell100
    Backup & Recovery30
    Grid(hsx) Cvfs30