commvault commvault
productUScpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
8critical10high4medium0low
updated 2026-10-27
01
vulnerabilities (22)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-34028US | critical10.0OT critical | KEV |
| CVE-2025-3928US | high8.8OT critical | KEV |
| CVE-2017-18044US | critical9.8 | Exploit |
| CVE-2025-57790US | high8.8 | Exploit |
| CVE-2025-57791US | medium6.5 | Exploit |
| CVE-2025-57788US | medium6.5OT elevated | Exploit |
| CVE-2025-57789US | medium5.4 | — |
| CVE-2026-13738US | critical9.8OT elevated | — |
| CVE-2026-13737US | critical9.8OT elevated | — |
| CVE-2026-77089US | critical9.8 | — |
| CVE-2026-77106US | high8.8OT elevated | — |
| CVE-2026-77104US | high7.5 | — |
| CVE-2026-77103US | high7.5OT elevated | — |
| CVE-2026-13739US | critical9.8 | — |
| CVE-2026-77098US | critical9.8 | — |
| CVE-2026-77097US | high8.2OT elevated | — |
| CVE-2026-77102US | high7.5 | — |
| CVE-2026-77101US | high7.5 | — |
| CVE-2026-77092US | critical9.8 | — |
| CVE-2026-77105US | high8.8 | — |
| CVE-2026-77091US | high7.8 | — |
| CVE-2025-12776US | medium5.4 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
- CWE-306Missing Authentication for Critical Function2 CVEs
- CWE-863Incorrect Authorization2 CVEs
- CWE-121Stack-based Buffer Overflow1 CVEs
- CWE-122Heap-based Buffer Overflow1 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-23Relative Path Traversal1 CVEs
- CWE-257Storing Passwords in a Recoverable Format1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE22 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan