Vulnerability Details
Basic Information
| Title | CVE-2025-34028 |
|---|---|
| Type | cve |
| Published | 2025-04-22T17:16:48 |
| Last Seen | 2025-04-22T17:26:54 |
| CVSS Score | 10.0 (CRITICAL) |
CVSS v3 Details
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | CHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
CVE Information
| CVE IDs | CVE-2025-34028 |
|---|---|
| CWE | CWE-22 |
| Bulletin Family | cve |
Description
A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution.
This issue affects Command Center Innovation Release: 11.38.
Impact Assessment
| Base Score | 10.0 |
|---|---|
| Severity | CRITICAL |