CVE-2025-3928 Commvault Web Server
Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.
- CVSS
- not scored
On CISA’s exploited list
Commvault Web Server Unspecified Vulnerability
- Added
- 2025-04-28
- Federal patch deadline
- 2025-05-19
- Ransomware use
- not known