SWSandworm Watch
target entity

Commvault

2 source-linked records in the current knowledge graph.

high

CVE-2025-34028: Commvault Command Center Path Traversal Vulnerability

Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2025-34028EPSS 97.3%Command CenterCommvault
CISA KEV ↗ · unattributed attribution
high

CVE-2025-3928: Commvault Web Server Unspecified Vulnerability

Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2025-3928EPSS 2.0%CommvaultWeb Server
CISA KEV ↗ · unattributed attribution