Records43All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9
Exploited now
Commvault records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03996 · Published 2015-11-04 · No fix listed CWE-78
