Vulnerabilities > CVE-2025-3928 - Unspecified vulnerability in Commvault

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

NVD

Published: 2025-04-25

Updated: 2025-05-28

Summary

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for Windows and Linux platforms. This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28.

Vulnerable Configurations

Part	Description	Count
Application	Commvault Commvault Commvault 11.20.0 Commvault Commvault 11.20.3 Commvault Commvault 11.20.6 Commvault Commvault 11.20.7 Commvault Commvault 11.20.9 Commvault Commvault 11.20.10 Commvault Commvault 11.20.11 Commvault Commvault 11.20.12 Commvault Commvault 11.20.13 Commvault Commvault 11.20.14 Commvault Commvault 11.20.17 Commvault Commvault 11.20.18 Commvault Commvault 11.20.19 Commvault Commvault 11.20.20 Commvault Commvault 11.20.21 Commvault Commvault 11.20.22 Commvault Commvault 11.20.23 Commvault Commvault 11.20.24 Commvault Commvault 11.20.25 Commvault Commvault 11.20.26 Commvault Commvault 11.20.27 Commvault Commvault 11.20.28 Commvault Commvault 11.20.29 Commvault Commvault 11.20.30 Commvault Commvault 11.20.31 Commvault Commvault 11.20.32 Commvault Commvault 11.20.33 Commvault Commvault 11.20.34 Commvault Commvault 11.20.35 Commvault Commvault 11.20.36 Commvault Commvault 11.20.37 Commvault Commvault 11.20.38 Commvault Commvault 11.20.39 Commvault Commvault 11.20.40 Commvault Commvault 11.20.41 Commvault Commvault 11.20.42 Commvault Commvault 11.20.43 Commvault Commvault 11.20.44 Commvault Commvault 11.20.45 Commvault Commvault 11.20.46 Commvault Commvault 11.20.47 Commvault Commvault 11.20.48 Commvault Commvault 11.20.49 Commvault Commvault 11.20.51 Commvault Commvault 11.20.52 Commvault Commvault 11.20.53 Commvault Commvault 11.20.54 Commvault Commvault 11.20.55 Commvault Commvault 11.20.56 Commvault Commvault 11.20.57 Commvault Commvault 11.20.58 Commvault Commvault 11.20.59 Commvault Commvault 11.20.60 Commvault Commvault 11.20.61 Commvault Commvault 11.20.62 Commvault Commvault 11.20.63 Commvault Commvault 11.20.64 Commvault Commvault 11.20.65 Commvault Commvault 11.20.66 Commvault Commvault 11.20.67 Commvault Commvault 11.20.71 Commvault Commvault 11.20.72 Commvault Commvault 11.20.73 Commvault Commvault 11.20.74 Commvault Commvault 11.20.75 Commvault Commvault 11.20.76 Commvault Commvault 11.20.77 Commvault Commvault 11.20.78 Commvault Commvault 11.20.79 Commvault Commvault 11.20.80 Commvault Commvault 11.20.81 Commvault Commvault 11.20.82 Commvault Commvault 11.20.84 Commvault Commvault 11.20.85 Commvault Commvault 11.20.86 Commvault Commvault 11.20.87 Commvault Commvault 11.20.88 Commvault Commvault 11.20.89 Commvault Commvault 11.20.90 Commvault Commvault 11.20.91 Commvault Commvault 11.20.92 Commvault Commvault 11.20.93 Commvault Commvault 11.20.94 Commvault Commvault 11.20.95 Commvault Commvault 11.20.96 Commvault Commvault 11.20.97 Commvault Commvault 11.20.98 Commvault Commvault 11.20.99 Commvault Commvault 11.20.100 Commvault Commvault 11.20.101 Commvault Commvault 11.20.102 Commvault Commvault 11.20.104 Commvault Commvault 11.20.105 Commvault Commvault 11.20.106 Commvault Commvault 11.20.107 Commvault Commvault 11.20.108 Commvault Commvault 11.20.110 Commvault Commvault 11.20.111 Commvault Commvault 11.20.112 Commvault Commvault 11.20.113 Commvault Commvault 11.20.114 Commvault Commvault 11.20.115 Commvault Commvault 11.20.116 Commvault Commvault 11.20.117 Commvault Commvault 11.20.118 Commvault Commvault 11.20.119 Commvault Commvault 11.20.120 Commvault Commvault 11.20.121 Commvault Commvault 11.20.122 Commvault Commvault 11.20.123 Commvault Commvault 11.20.124 Commvault Commvault 11.20.125 Commvault Commvault 11.20.128 Commvault Commvault 11.20.129 Commvault Commvault 11.20.130 Commvault Commvault 11.20.131 Commvault Commvault 11.20.132 Commvault Commvault 11.20.133 Commvault Commvault 11.20.134 Commvault Commvault 11.20.135 Commvault Commvault 11.20.136 Commvault Commvault 11.20.137 Commvault Commvault 11.20.139 Commvault Commvault 11.20.142 Commvault Commvault 11.20.143 Commvault Commvault 11.20.145 Commvault Commvault 11.20.146 Commvault Commvault 11.20.147 Commvault Commvault 11.20.148 Commvault Commvault 11.20.149 Commvault Commvault 11.20.150 Commvault Commvault 11.20.152 Commvault Commvault 11.20.154 Commvault Commvault 11.20.156 Commvault Commvault 11.20.157 Commvault Commvault 11.20.158 Commvault Commvault 11.20.160 Commvault Commvault 11.20.161 Commvault Commvault 11.20.162 Commvault Commvault 11.20.163 Commvault Commvault 11.20.164 Commvault Commvault 11.20.165 Commvault Commvault 11.20.166 Commvault Commvault 11.20.167 Commvault Commvault 11.20.168 Commvault Commvault 11.20.170 Commvault Commvault 11.20.171 Commvault Commvault 11.20.172 Commvault Commvault 11.20.174 Commvault Commvault 11.20.176 Commvault Commvault 11.20.180 Commvault Commvault 11.20.182 Commvault Commvault 11.20.183 Commvault Commvault 11.20.185 Commvault Commvault 11.20.186 Commvault Commvault 11.20.188 Commvault Commvault 11.20.189 Commvault Commvault 11.20.191 Commvault Commvault 11.20.192 Commvault Commvault 11.20.193 Commvault Commvault 11.20.196 Commvault Commvault 11.20.199 Commvault Commvault 11.20.200 Commvault Commvault 11.20.202 Commvault Commvault 11.20.204 Commvault Commvault 11.20.207 Commvault Commvault 11.20.209 Commvault Commvault 11.20.212 Commvault Commvault 11.20.213 Commvault Commvault 11.28.0 Commvault Commvault 11.28.1 Commvault Commvault 11.28.2 Commvault Commvault 11.28.3 Commvault Commvault 11.28.4 Commvault Commvault 11.28.5 Commvault Commvault 11.28.8 Commvault Commvault 11.28.9 Commvault Commvault 11.28.10 Commvault Commvault 11.28.11 Commvault Commvault 11.28.12 Commvault Commvault 11.28.13 Commvault Commvault 11.28.14 Commvault Commvault 11.28.15 Commvault Commvault 11.28.16 Commvault Commvault 11.28.17 Commvault Commvault 11.28.18 Commvault Commvault 11.28.19 Commvault Commvault 11.28.20 Commvault Commvault 11.28.23 Commvault Commvault 11.28.24 Commvault Commvault 11.28.32 Commvault Commvault 11.28.33 Commvault Commvault 11.28.34 Commvault Commvault 11.28.35 Commvault Commvault 11.28.36 Commvault Commvault 11.28.37 Commvault Commvault 11.28.44 Commvault Commvault 11.28.45 Commvault Commvault 11.28.48 Commvault Commvault 11.28.49 Commvault Commvault 11.28.50 Commvault Commvault 11.28.51 Commvault Commvault 11.28.52 Commvault Commvault 11.28.53 Commvault Commvault 11.28.54 Commvault Commvault 11.28.55 Commvault Commvault 11.28.56 Commvault Commvault 11.28.58 Commvault Commvault 11.28.59 Commvault Commvault 11.28.60 Commvault Commvault 11.28.63 Commvault Commvault 11.28.64 Commvault Commvault 11.28.65 Commvault Commvault 11.28.66 Commvault Commvault 11.28.68 Commvault Commvault 11.28.69 Commvault Commvault 11.28.70 Commvault Commvault 11.28.71 Commvault Commvault 11.28.72 Commvault Commvault 11.28.73 Commvault Commvault 11.28.74 Commvault Commvault 11.28.75 Commvault Commvault 11.28.76 Commvault Commvault 11.28.77 Commvault Commvault 11.28.78 Commvault Commvault 11.28.79 Commvault Commvault 11.28.80 Commvault Commvault 11.28.81 Commvault Commvault 11.28.82 Commvault Commvault 11.28.83 Commvault Commvault 11.28.84 Commvault Commvault 11.28.85 Commvault Commvault 11.28.91 Commvault Commvault 11.28.92 Commvault Commvault 11.28.93 Commvault Commvault 11.28.94 Commvault Commvault 11.28.95 Commvault Commvault 11.28.96 Commvault Commvault 11.28.100 Commvault Commvault 11.28.101 Commvault Commvault 11.28.102 Commvault Commvault 11.28.104 Commvault Commvault 11.28.105 Commvault Commvault 11.28.106 Commvault Commvault 11.28.107 Commvault Commvault 11.28.108 Commvault Commvault 11.28.109 Commvault Commvault 11.28.110 Commvault Commvault 11.28.111 Commvault Commvault 11.28.112 Commvault Commvault 11.28.113 Commvault Commvault 11.28.114 Commvault Commvault 11.28.115 Commvault Commvault 11.28.116 Commvault Commvault 11.28.117 Commvault Commvault 11.28.119 Commvault Commvault 11.28.120 Commvault Commvault 11.28.121 Commvault Commvault 11.28.122 Commvault Commvault 11.28.123 Commvault Commvault 11.28.124 Commvault Commvault 11.28.125 Commvault Commvault 11.28.126 Commvault Commvault 11.28.127 Commvault Commvault 11.28.128 Commvault Commvault 11.28.130 Commvault Commvault 11.28.131 Commvault Commvault 11.28.132 Commvault Commvault 11.28.133 Commvault Commvault 11.28.134 Commvault Commvault 11.28.135 Commvault Commvault 11.28.137 Commvault Commvault 11.32.0 Commvault Commvault 11.32.1 Commvault Commvault 11.32.2 Commvault Commvault 11.32.3 Commvault Commvault 11.32.4 Commvault Commvault 11.32.5 Commvault Commvault 11.32.6 Commvault Commvault 11.32.7 Commvault Commvault 11.32.8 Commvault Commvault 11.32.12 Commvault Commvault 11.32.13 Commvault Commvault 11.32.19 Commvault Commvault 11.32.20 Commvault Commvault 11.32.21 Commvault Commvault 11.32.22 Commvault Commvault 11.32.23 Commvault Commvault 11.32.28 Commvault Commvault 11.32.29 Commvault Commvault 11.32.30 Commvault Commvault 11.32.31 Commvault Commvault 11.32.32 Commvault Commvault 11.32.33 Commvault Commvault 11.32.34 Commvault Commvault 11.32.35 Commvault Commvault 11.32.36 Commvault Commvault 11.32.37 Commvault Commvault 11.32.38 Commvault Commvault 11.32.39 Commvault Commvault 11.32.41 Commvault Commvault 11.32.42 Commvault Commvault 11.32.43 Commvault Commvault 11.32.45 Commvault Commvault 11.32.46 Commvault Commvault 11.32.47 Commvault Commvault 11.32.48 Commvault Commvault 11.32.49 Commvault Commvault 11.32.50 Commvault Commvault 11.32.52 Commvault Commvault 11.32.54 Commvault Commvault 11.32.55 Commvault Commvault 11.32.56 Commvault Commvault 11.32.57 Commvault Commvault 11.32.58 Commvault Commvault 11.32.59 Commvault Commvault 11.32.60 Commvault Commvault 11.32.61 Commvault Commvault 11.32.62 Commvault Commvault 11.32.63 Commvault Commvault 11.32.64 Commvault Commvault 11.32.65 Commvault Commvault 11.32.66 Commvault Commvault 11.32.67 Commvault Commvault 11.32.69 Commvault Commvault 11.32.70 Commvault Commvault 11.32.71 Commvault Commvault 11.32.73 Commvault Commvault 11.32.74 Commvault Commvault 11.32.76 Commvault Commvault 11.32.77 Commvault Commvault 11.32.78 Commvault Commvault 11.32.79 Commvault Commvault 11.32.80 Commvault Commvault 11.32.81 Commvault Commvault 11.32.83 Commvault Commvault 11.32.84 Commvault Commvault 11.32.85 Commvault Commvault 11.32.86 Commvault Commvault 11.36.0 Commvault Commvault 11.36.1 Commvault Commvault 11.36.3 Commvault Commvault 11.36.6 Commvault Commvault 11.36.8 Commvault Commvault 11.36.10 Commvault Commvault 11.36.12 Commvault Commvault 11.36.14 Commvault Commvault 11.36.16 Commvault Commvault 11.36.18 Commvault Commvault 11.36.20 Commvault Commvault 11.36.22 Commvault Commvault 11.36.24 Commvault Commvault 11.36.25 Commvault Commvault 11.36.27 Commvault Commvault 11.36.28 Commvault Commvault 11.36.29 Commvault Commvault 11.36.30 Commvault Commvault 11.36.32 Commvault Commvault 11.36.34 Commvault Commvault 11.36.35 Commvault Commvault 11.36.36 Commvault Commvault 11.36.37 Commvault Commvault 11.36.38 Commvault Commvault 11.36.39 Commvault Commvault 11.36.41 Commvault Commvault 11.36.42 Commvault Commvault 11.36.43	367
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Related news

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.