Brand
Commvault: actively exploited vulnerabilities
2 vulnerabilities in Commvault products (Command Center, Web Server) are in CISA’s catalog of exploited vulnerabilities. Last added: May 2, 2025.
-
0 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Commvault category to your radar, or open its page.
- Backup, storage and NAS 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Commvault product (Command Center, Web Server…) rather than the whole brand.
- Command Center1 vulnerability, Backup and NAS
- Web Server1 vulnerability, Backup and NAS
Name used by CISA: Commvault. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Commvault list.
- Rank 1
Commvault Command CenterCVE-2025-34028
Commvault Command Center Path Traversal Vulnerability
CVSS severity 10.0critical
Added May 2, 2025
- Rank 2
Commvault Web ServerCVE-2025-3928
Commvault Web Server Unspecified Vulnerability
CVSS severity 8.8high
Added Apr 28, 2025
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.