Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Commvault

Products: Command Center Innovation Release · Web Server

67.0

Score

2

CVEs

2

Active

0

PoC

2

KEV

#41

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-3928	2025-04-25	8.7v4.0	ACTIVE		Low	Low	no	26.4	Web Server	Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.46, 11.32.89, 11.28.141, and 11.20.217 for
CVE-2025-34028	2025-04-22	9.3v4.0	ACTIVE		Low	None	YES	40.6	Command Center Innovation Release	The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue aff

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3