Commvault Critical Webserver Vulnerability (CV_2025_03_1)

Language:

Version 1.7 Sep 12, 2025, 4:43 PM Logic Changes (Updated so as not to fire on unaffected Commvault clients.) Plugin Feed: 202509121643
Version 1.6 Aug 26, 2025, 5:34 PM Detection (updated affected application type) Plugin Feed: 202508261734
Version 1.5 May 30, 2025, 10:30 PM Detection (Fixed version comparison) Plugin Feed: 202505302230
Version 1.4 May 30, 2025, 3:10 PM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202505301510
Version 1.3 May 29, 2025, 11:36 PM Plugin metadata (Added CVE-2025-3928 and updated CVSS vectors to match NVD) Plugin Feed: 202505292336
Version 1.2 Mar 17, 2025, 10:32 PM IAVM reference Plugin Feed: 202503172232
Version 1.1 Mar 13, 2025, 9:08 PM New Plugin Feed: 202503132108

* Changelogs are generally available for changes made after Nov 1, 2022