CVE-2025-3928: commvault from 11.20.0 (inclusive), before 11.20.217 (exclusive), from 11.28.0 (inclusive), before 11.28.141…

Affected technology

commvault · from 11.20.0 (inclusive), before 11.20.217 (exclusive)
commvault

commvault · from 11.28.0 (inclusive), before 11.28.141 (exclusive)
commvault

commvault · from 11.32.0 (inclusive), before 11.32.89 (exclusive)
commvault

commvault · from 11.36.0 (inclusive), before 11.36.46 (exclusive)
commvault

Web Server · 11.36.0 to before 11.36.46, 11.32.0 to before 11.32.89, 11.28.0 to before 11.28.141, 11.20.0 to before 11.20.217
Commvault

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.