Commvault

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability…

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker.

A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.

A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue.

A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation.

Command Center API contained an authentication bypass issue affecting privilege management.

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials.

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs.

CommServe contained a heap-based buffer overflow issue affecting service availability.

CommServe contained a stack-based buffer overflow issue affecting service availability.

Private Metrics Server contained an SQL injection condition affecting database operations.

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability.

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations.

CommServe contained an allowlist bypass vulnerability affecting command execution authorization.

CommServe contained a cryptographic signature verification issue affecting privilege management.

CommServe contained an authentication bypass issue affecting access authorization and information disclosure.

DataCube contained a path traversal issue affecting security feature enforcement.

CommServe contained a path traversal issue affecting information disclosure.

Cvlaunchd contained a missing authorization issue affecting command execution authorization.

Content Extractor contained a deserialization of untrusted data issue affecting privilege management.

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control.

The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting (XSS) attack.