Commvault vulnerabilities
40 CVEs and advisories name Commvault as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-13975Commvault 11.20.0 - 11.36.0 Windows Access Nodes Compromise via Local File Server Agent Abuse
- CVE-2025-34136Commvault CommServe Web Server Unauthenticated SQL Injection
- CVE-2025-3928Commvault Web Server unspecified vulnerability
- CVE-2025-34028Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
- CVE-2021-34997This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
- CVE-2021-34996This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
- CVE-2021-34995This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
- CVE-2021-34994This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.
- CVE-2021-34993This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22.
- CVE-2017-3195Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl