VDB

CVE-2025-34028

CVE-2025-34028 PUBLISHED KEV CVSS 9.300000190734863 CRITICAL

A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38.

EPSS 65.34% · 98.5th percentile

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS Score
65.34%
98.5th percentile

Affected Products

VendorProductVersions
commvaultcommvault11.38.0, 11.38.0
CommvaultCommand Center Innovation Release11.38.0

Timeline

  • Jan 20, 1970 CrowdSec Sighting
  • Jan 21, 1970 CrowdSec Sighting
  • Jan 21, 1970 CrowdSec Sighting
  • Jan 21, 1970 CrowdSec Sighting
  • Jan 21, 1970 CrowdSec Sighting
  • Jan 21, 1970 CrowdSec Sighting
  • Aug 12, 2021 CrowdSec Sighting
  • Oct 21, 2021 CrowdSec Sighting
  • Mar 8, 2022 CrowdSec Sighting
  • Nov 8, 2022 CrowdSec Sighting
  • Mar 9, 2023 CrowdSec Sighting
  • Apr 5, 2023 CrowdSec Sighting

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›