Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Commvault: actively exploited vulnerabilities

2 vulnerabilities in Commvault products (Command Center, Web Server) are in CISA’s catalog of exploited vulnerabilities. Last added: May 2, 2025.

0 vulnerabilities added in the last 12 months
2 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one Commvault category to your radar, or open its page.

Backup, storage and NAS 2 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Command Center 1 vulnerability · Backup and NAS
Web Server 1 vulnerability · Backup and NAS

Name used by CISA: Commvault. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Commvault list.

Rank 1Commvault Command Center
CVE-2025-34028
Commvault Command Center Path Traversal Vulnerability
Added more than a year ago: ranked by severity.
Added
May 2, 2025
CISA deadline
21 days
CVSS severity
10.0 (critical)
Rank 2Commvault Web Server
CVE-2025-3928
Commvault Web Server Unspecified Vulnerability
Added more than a year ago: ranked by severity.
Added
Apr 28, 2025
CISA deadline
21 days
CVSS severity
8.8 (high)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.