Commcell

Vendor:

First CVE: Oct 29, 2020 · Active for 5 years

10
Total CVEs
More Total CVEs than 88% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 69% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Commcell over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 29, 2020
5 years ago
Most Recent CVE
Aug 20, 2025
338 days ago

CVE Severity & Scoring

Commcell10 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low6 (60.0%)
High0 (0.0%)
None4 (40.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-34996HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this v
Jan 13, 20228.873NONO
CVE-2021-34995HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this v
Jan 13, 20228.866NONO
CVE-2025-57790HIGH
A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue. The vulnerability may lead to r
Aug 20, 20258.855NOYES
CVE-2025-57791MEDIUM
A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input val
Aug 20, 20256.551NOYES
CVE-2025-57788MEDIUM
A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not elim
Aug 20, 20256.549NOYES
CVE-2020-25780HIGH
In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a
Oct 29, 20207.537NOYES
CVE-2025-57789MEDIUM
During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the se
Aug 20, 20255.435NOYES
CVE-2021-34993CRITICAL
This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22. Authentication is not required to exploit this vulnera
Jan 13, 20229.834NONO
CVE-2021-34994HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this v
Jan 13, 20228.830NONO
CVE-2021-34997HIGH
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this v
Jan 13, 20228.829NONO
View all 10 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
3 CVEs
30.0% of CVEs· 98th percentile
Nuclei
3 CVEs
30.0% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (10 CVEs).

Media Mentions

Signals from CVEs in this product scope (10 CVEs).

Top CNAs Publishing CVEs For Commcell

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
11.22.2259.033.3%00