Skip to content

Exposure Monitor

VulniPulse aggregates official vendor advisories for defensive patching decisions. Always confirm against the linked vendor advisory before acting.

Send feedback — report a bug, flag incorrect data, or suggest a feature. Follow @vulnipulse on X for real-time critical & KEV alerts.

Low1.8Commvault Updated

Stored Cross-Site Scripting Vulnerability

CV_2025_06_3 Published Oct 14, 2025Updated by vendor Jun 6, 2025

Affected products & platforms

CommvaultUnclassified

Open vendor advisory

Summary

Stored Cross-Site Scripting Vulnerability

Affected versions

Affected Versions
11.36.0 - 11.36.68
11.32.0 - 11.32.112

Official advisory · medium-confidence parse· fetched 6 hours ago·verify at source

Fixed versions

11.40.1

Official advisory · medium-confidence parse· fetched 6 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Install the listed maintenance release (or a more recent one) for your feature release: 11.40.1.

Official advisory · medium-confidence parse· fetched 6 hours ago·verify at source

Source evidence

What VulniPulse actually used to build this record — and why.

Commvault Cloud Security Advisoriesofficial
Official vendor feed — the source of truth for this advisory. VulniPulse polled this feed and parsed this entry from it.
Commvault
Vendor advisory pageofficial
Advisory page fetched and parsed to extract affected/fixed versions and mitigation guidance beyond what the feed carries.
Commvault

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.

Stored Cross-Site Scripting Vulnerability · VulniPulse