CVE-2025-3928

Severity

HIGH

CVSS

8.7

EPSS

0.02089

Risk score

60.53

CISA KEV

Yes

PoC

Published

2025-04-28

Modified

2025-04-28

First seen

2026-08-07

Aliases

EUVD-2025-12508, GHSA-WQXV-V2VG-Q37X

Products

Commvault:Web Server, Commvault:Web Server 11.20.0 <11.20.217, Commvault:Web Server 11.28.0 <11.28.141, Commvault:Web Server 11.32.0 <11.32.89, Commvault:Web Server 11.36.0 <11.36.46

Sources

cisa.gov CVE-2025-3928
euvd EUVD-2025-12508

Description

Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2025-3928
https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html
https://www.commvault.com/blogs/notice-security-advisory-update
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-12508
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-3928
https://www.commvault.com/blogs/security-advisory-march-7-2025
https://www.cisa.gov/news-events/alerts/2025/05/22/advisory-update-cyber-threat-activity-targeting-commvaults-saas-cloud-application-metallic
https://www.commvault.com/blogs/customer-security-update