CVE-2025-3928
CVE-2025-3928: 1 tracked advisory record across Commvault. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Commvault
1 advisory- Advisory severityHigh
High [CVE-2025-3928] Critical Webserver Vulnerability
CV_2025_03_1Source published Source updated
CVE.Org link: CVE-2025-3928 Save as PDF A vulnerability has been identified and remediated in all supported versions of the Commvault software. Webservers can be compromised through bad actors creating and executing webshells. Exploiting this vulnerability requires a bad actor to have authenticated user credentials within the Commvault Software environment. Unauthenticated access is not exploitable. For software customers, this means your environment must be: (i) accessible via the internet, (ii) compromised through an unrelated avenue, and (iii) accessed leveraging legitimate user credentials.
- Affected products in this advisory
- Web Server
- Source-reported affected versions
- Product Platforms Affected Versions Resolved Version Status Commvault Linux, Windows 11.36.0 - 11.36.45 11.36.46 Resolved Commvault Linux, Windows 11.32.0 - 11.32.88 11.32.89 Resolved Commvault Linux, Windows 11.28.0 - 11.28.140 11.28.141 Resolved Commvault Linux, Windows 11.20.0 - 11.20.216 11.20.2
- 11.36.0
- 11.36.45
- 11.36.46
12 more entries in the full advisory.
- Source-reported fixed versions
- 11.36.46
- 11.32.89
- 11.28.141
- 11.20.217
- Mitigation guidance
- Install the listed maintenance release (or a more recent one) for your feature release: 11.36.46, 11.32.89, 11.28.141, 11.20.217.
Android app · Google Play
Monitor future Commvault CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.