Commvault Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:commvault:commvault_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Commvault (d5a65334-3838-5ae8-8891-4ab1adbfb7b4) |
|---|---|
| Product | Commvault Cloud (6ddd7f7a-8948-5fd4-b0ed-e92256ed0ffe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13737 |
vulnerable | 2026-09-16 04:32:50.212548 |
Command Restriction Bypass
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Published: 2026-08-11T11:01:38.785Z
Updated: 2026-08-11T16:49:09.354Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13739 |
vulnerable | 2026-09-16 04:32:50.108979 |
Server-Side Request Forgery (SSRF)
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.
Published: 2026-08-11T11:01:38.340Z
Updated: 2026-08-11T14:13:35.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13738 |
vulnerable | 2026-09-16 04:32:49.867495 |
Improper Authorization Validation
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Published: 2026-08-11T11:01:39.248Z
Updated: 2026-08-11T16:48:34.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77097 |
vulnerable | 2026-09-16 04:32:40.955462 |
Private Metrics Server Denial of Service
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.
Published: 2026-09-08T12:12:53.765Z
Updated: 2026-09-08T13:30:17.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77102 |
vulnerable | 2026-09-16 04:32:40.954495 |
CommServe Denial of Service
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
Published: 2026-09-08T12:12:54.281Z
Updated: 2026-09-08T13:25:21.705Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77106 |
vulnerable | 2026-09-16 04:32:40.946837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77103 |
vulnerable | 2026-09-16 04:32:40.787041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77092 |
vulnerable | 2026-09-16 04:32:40.776004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77098 |
vulnerable | 2026-09-16 04:32:40.551114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77101 |
vulnerable | 2026-09-16 04:32:40.548914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77105 |
vulnerable | 2026-09-16 04:32:40.508760 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77091 |
vulnerable | 2026-09-16 04:32:40.491318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77089 |
vulnerable | 2026-09-16 04:32:40.455415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-77104 |
vulnerable | 2026-09-16 04:32:40.454592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.